f3e18e46db8050f0d32a3293568bac46_JaffaCakes118 | Triage

Sharing

General

Target

f3e18e46db8050f0d32a3293568bac46_JaffaCakes118
Size

5KB
MD5

f3e18e46db8050f0d32a3293568bac46
SHA1

d44b0738896b83a8c59e85f01ab431cf0422af83
SHA256

7463739097df9920d5848d5ed96a103e0846c4c893c25031d86d8d2d11d10140
SHA512

19323f7162ce0337653ce998f24624304a38b09340bfddfc750c8fc64425e4e0758aa5547075046ad2d854321bfac4038583d4f9d5b562fa4fefed8c707cb6f6
SSDEEP

96:RJL/Jp0/J4RlhLXV7DMyuIkfrcNRi64zwKvdqtwdYKpJ7DEJkpddsp:nJIJaxdw9uRi5kmdYiBDqL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3e18e46db8050f0d32a3293568bac46_JaffaCakes118

Files

f3e18e46db8050f0d32a3293568bac46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

code
Size: - Virtual size: 184KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vtext
Size: 20KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE