f35168af163166990b077dc047a3f9b8_JaffaCakes118 | Triage

Sharing

General

Target

f35168af163166990b077dc047a3f9b8_JaffaCakes118
Size

1.6MB
MD5

f35168af163166990b077dc047a3f9b8
SHA1

f91b589174c3f050419f7e1fc753ff8040648b4d
SHA256

8424134f505581b183cd1f5f9b45dda5ce79fa8ef337365ba49b5fd7bd4cbb50
SHA512

b0fe3eb53f861c5daeb7484845e9e7b4f2dab3aac20594b226b038340c9df813394cdd1c6ff6f7d75e49da245ccff1aa04194f421d147cdeaad893c7772533ac
SSDEEP

24576:5/bKbwt8cRahuxJwZszSJXWeSiQ/J6gJaSieNPGRbo1v1VVE8R3p7KSRBZC5op5Z:5TwAhip/y5N333cStCupkJPCJak

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f35168af163166990b077dc047a3f9b8_JaffaCakes118

Files

f35168af163166990b077dc047a3f9b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 12KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Services
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE