015e856784c544c3286d14c70fb75579_JaffaCakes118 | Triage

Sharing

General

Target

015e856784c544c3286d14c70fb75579_JaffaCakes118
Size

241KB
MD5

015e856784c544c3286d14c70fb75579
SHA1

e952a6f2b933006beb281e4300fb0a0320ed7bfa
SHA256

10fd8d521a2655bc683be7670fbf8d848ca65086dfc99b4ed5e6a6047fac981a
SHA512

c7de06dae4adc1111f102f243d71aa1f483c18fdc4178a89ec51f819b57c212eb25fb9ba16e407057046d0acb644061a2a035713cc7c55b3966090679616a39c
SSDEEP

6144:h9+WyuVvXccmWrL/iLLb6admRkomPt4AZuQjTSi4m:h9XxccmsK7dmuNZuUTd4m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
015e856784c544c3286d14c70fb75579_JaffaCakes118

Files

015e856784c544c3286d14c70fb75579_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pmj
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE