f51f18d8b9885cbdd3877c5167925ae0_JaffaCakes118 | Triage

Sharing

General

Target

f51f18d8b9885cbdd3877c5167925ae0_JaffaCakes118
Size

385KB
MD5

f51f18d8b9885cbdd3877c5167925ae0
SHA1

81eac5687389bfac5c4292e7a7698190c6af3ced
SHA256

5b939d179eb70d85a2f05c5f35d3ff053f443c6230d186e8710938d93a76c52e
SHA512

e794e2fed98c784285675c68157d7e9601d3c0e3d252f909d830bc1e588f6da3ad8d96ef724f75080d948b7d51cf84b3d0f89492143308f4a6a2f964f9bcc220
SSDEEP

12288:IK1IW/aRy4hExAY97gAKJyxwFlAH3XLoCjwB:IKx/G8Z75lLoCcB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f51f18d8b9885cbdd3877c5167925ae0_JaffaCakes118

Files

f51f18d8b9885cbdd3877c5167925ae0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ