f7368d0dfc50858479e4639a3ac921d3_JaffaCakes118 | Triage

Sharing

General

Target

f7368d0dfc50858479e4639a3ac921d3_JaffaCakes118
Size

199KB
MD5

f7368d0dfc50858479e4639a3ac921d3
SHA1

8f895299d739d87a8c854d1300aff24540b3d18b
SHA256

6b343d099852bad6ac365ea6de11f2f22c293a2bbfac9a2587572903b0330adc
SHA512

61ef9a1f6c6662cbfbc2d238f2efe5290900c7b341dcd3fada209570765bf7e364ec8cf92e626fc881d216599fd7568e889e990232b55aafdc8b02803d325f0f
SSDEEP

3072:epwc/N6vAzTPzaIuVbZOJmXGC0rwm0ksA6bJbAXemJjVOlnLUGMCFhpYy4b/K:c6TIfJtC0sbKJBOlLuoYy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7368d0dfc50858479e4639a3ac921d3_JaffaCakes118

Files

f7368d0dfc50858479e4639a3ac921d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 130KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE