0e21195230325f3e3165a335af60c81c_JaffaCakes118 | Triage

Sharing

General

Target

0e21195230325f3e3165a335af60c81c_JaffaCakes118
Size

967KB
MD5

0e21195230325f3e3165a335af60c81c
SHA1

acfa28a60a4cc028c9ede6d19ae9f0a2b4eed658
SHA256

b62e2d5028a28c3a636d1ab777d9a0ecaca17c55fdc7cda34671adae93f76625
SHA512

78de380e02f05a7728e3a9df148a2c45ab60fc63537062a919a5545e05cf56e9e2b7868df2f93ad5cef1418ed4627a30559e7f492c8746dd5cd5ce7d90b95400
SSDEEP

24576:A+pbzwIxk4VdoqmRNOuf6QOEVn01QVzWLn:hpbkGtLKJf6QrVn065WLn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
0e21195230325f3e3165a335af60c81c_JaffaCakes118

Files

0e21195230325f3e3165a335af60c81c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 431KB - Virtual size: 430KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ