222d9611e16718b1bb2f04e2e2592c07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

222d9611e16718b1bb2f04e2e2592c07_JaffaCakes118
Size

696KB
MD5

222d9611e16718b1bb2f04e2e2592c07
SHA1

e8b528fb099b5f38fab3652bebe3292eb447fd77
SHA256

0560213e12a5a6cbe56dfc57594fd7679efda93651e52fbc5c17df162f1db7a9
SHA512

140df97f2222b0228572a90b7aad4b9d1bc9bbbc3e4a5b57d87e0da9a5b0b7266b6ebf229751621d98886d68b153e3d5ec3d8509952e6ddb9ef91343f8f78c4f
SSDEEP

12288:lb1P793mDlfkGnearewhmgytdNF3+ghpDIcfXEQ4CWZ3ClsZ6lX8sAsijGP1tKzX:LT93Alfvnea4dNsghpDHfUQ4CWgag8sQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
222d9611e16718b1bb2f04e2e2592c07_JaffaCakes118

Files

222d9611e16718b1bb2f04e2e2592c07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 671KB - Virtual size: 671KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ