f1aa73b6a47271275e85d6ffeb1f4ca4_JaffaCakes118 | Triage

Sharing

General

Target

f1aa73b6a47271275e85d6ffeb1f4ca4_JaffaCakes118
Size

183KB
MD5

f1aa73b6a47271275e85d6ffeb1f4ca4
SHA1

5cf5614a26e3e290ed55b4b04a95c325c07cd580
SHA256

ea444166b261be01d53d38cb58fe450139a83ff9987dfe3f51d1317461f17796
SHA512

7e68d3e89794b7e8c6512f737f5c862ae244f486fdc4093ad5ca66f3f924b1af4e045ac2866ff07cc4ac524dab3acdcfff9e41f5a814451d36eb3b6c31d46299
SSDEEP

3072:rYMyAbYurfi666664bP20t3LuG/l5PjxA/hKxngkJFX:8MIw+3qk5PEktgkJZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1aa73b6a47271275e85d6ffeb1f4ca4_JaffaCakes118

Files

f1aa73b6a47271275e85d6ffeb1f4ca4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ