ed1591519722b578e542d4fa8b73f962_JaffaCakes118 | Triage

Sharing

General

Target

ed1591519722b578e542d4fa8b73f962_JaffaCakes118
Size

107KB
MD5

ed1591519722b578e542d4fa8b73f962
SHA1

f8b5786f91fc49df1bf0ede621af8b3abc9af95c
SHA256

ca8d9fc68b4e3848ed8c98e3fcb0df76e0f9e04d63954abc30f0a37b828a0c82
SHA512

fe54b015a0bdb2b81118968c50638ad5aba4efae4f7743ac9a1ed27017674d831cd5a7eb0db32efc91f4878f17e515f15e8f5687cd3eb1735613742c33938907
SSDEEP

3072:VQt8oOr7B2KkY8OsEGheT39W23emi9X3kuJo:Va8oOrlEOsEGheTMB9I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed1591519722b578e542d4fa8b73f962_JaffaCakes118

Files

ed1591519722b578e542d4fa8b73f962_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ