2645e40c7a317029db564fb8b2bbe8ce_JaffaCakes118 | Triage

Sharing

General

Target

2645e40c7a317029db564fb8b2bbe8ce_JaffaCakes118
Size

943KB
MD5

2645e40c7a317029db564fb8b2bbe8ce
SHA1

82e2c7e9d7bfa7931950b3242705ff68ee5ca96c
SHA256

c5f6b79a0b63ff565f7508f2f3226a8d7af2bdd0f2d2c3d0d776c1c58fedc447
SHA512

5e62131c844ecbf3b71c7d7365c7ab12ba591fc1c1157c1eeb524b74a791224265a7b23b1e70bac0655392f056e96aa9d6ff43113b0a5e1792d28228a7e3cf24
SSDEEP

24576:yh1n2Ltlpm+x/Kjpnsw1Ihev0+3CqkRfG:wd2Zlk+patswqhp+yjG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2645e40c7a317029db564fb8b2bbe8ce_JaffaCakes118

Files

2645e40c7a317029db564fb8b2bbe8ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 445KB - Virtual size: 445KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ