f951a50c38649f76d9493fbb04bf4ea7_JaffaCakes118 | Triage

Sharing

General

Target

f951a50c38649f76d9493fbb04bf4ea7_JaffaCakes118
Size

647KB
MD5

f951a50c38649f76d9493fbb04bf4ea7
SHA1

589ea294bc2d2da43fcf8fb410f1d076796604f2
SHA256

c3f49674e3883c435296041e742c2c4b1347e83df69fe2ca2426c7de549308ab
SHA512

7bef2683d4317d6789f0ee273118689840a85960db4dad36ee66c9bbbb0b13fd3c4751b8885a91c1aadaa1a69becdec814fcfbc5183357379548b2e69bc4154e
SSDEEP

12288:5vAUkm8Ls+vBqUrg628pVO86N44DdhuF4YdxTWoRxBlcpyQSMwuVPJ:eTLj3rZxVO86ybF4YbTnBlcp3SPaJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f951a50c38649f76d9493fbb04bf4ea7_JaffaCakes118

Files

f951a50c38649f76d9493fbb04bf4ea7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 624KB - Virtual size: 620KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

XJ
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE