f11351188c17bb3de23b64f2a9fffaf3_JaffaCakes118 | Triage

Sharing

General

Target

f11351188c17bb3de23b64f2a9fffaf3_JaffaCakes118
Size

385KB
MD5

f11351188c17bb3de23b64f2a9fffaf3
SHA1

6913c823d408a2f41d3f0014280aa5cb712423d1
SHA256

cc8d10884595d6eeeec737482466c6eb2c67564a95dc332c06825cf8a70d8a43
SHA512

cf0f1ac202f1de1bbfa04a0b5d0fc5414ea83c1812965b7e03eef052452a246a47e2e7184f6bba328fd1790b03f7ae7098e1e444c5a6c3c0ba291c65f5ff28da
SSDEEP

12288:a3xnuo7Nq2kVadGWQJLkiOONbjFRBTisyvvB:kPgVahk2yjF7IXB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f11351188c17bb3de23b64f2a9fffaf3_JaffaCakes118

Files

f11351188c17bb3de23b64f2a9fffaf3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ