f17157fd45b6160533814091c7055ca9_JaffaCakes118 | Triage

Sharing

General

Target

f17157fd45b6160533814091c7055ca9_JaffaCakes118
Size

385KB
MD5

f17157fd45b6160533814091c7055ca9
SHA1

44e6cb47b7318830a38c9f5ad8f6ad6a20e1d790
SHA256

9d605a8e77b9c04821db49d620394c9cd0d576f9298c1b40a1f3018dc5f7d368
SHA512

8df6bef2e25068b1787660abed38780f0a4ad062c912dbff409bd79a53856be551285d4621ef602797cd3454c596ef00ba82ec910fa2197579fd0738dc31007e
SSDEEP

6144:sB4Yw8AOBuo0JMSiVdl8Aj2EYI2QMhROjL3G9AERu5FBuPEi88+UOFYNa3oB:sBd/Eo0bwtjnT6amA7TufFYoB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f17157fd45b6160533814091c7055ca9_JaffaCakes118

Files

f17157fd45b6160533814091c7055ca9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ