f89a04076b5aedef3250eb6c249f7a15_JaffaCakes118 | Triage

Sharing

General

Target

f89a04076b5aedef3250eb6c249f7a15_JaffaCakes118
Size

385KB
MD5

f89a04076b5aedef3250eb6c249f7a15
SHA1

20902406d2c3f5cf6f06fb3ca4b21a5288e023cc
SHA256

31d5d25096edfc92a96c2655ecd0993d940b375b0f3b08d799c0726a1d541701
SHA512

4993fa01ad9133138ae4ceb4f4083bfc4c75b1917e69400ab7043604b4548fed241b6c505d693093bbaba91bbe9fa369dd36d8592d0d1f59fbc3b981afe04779
SSDEEP

6144:4xO4GclbaTgFbAPfjzBACx3RsdJpL390i+mGj+/YeHcBahPHsB:4/GclbasqAYsvJ90iXG6YeHcBahkB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f89a04076b5aedef3250eb6c249f7a15_JaffaCakes118

Files

f89a04076b5aedef3250eb6c249f7a15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ