32e33bfc6db62ceced03aa6a086f0646_JaffaCakes118 | Triage

Sharing

General

Target

32e33bfc6db62ceced03aa6a086f0646_JaffaCakes118
Size

661KB
MD5

32e33bfc6db62ceced03aa6a086f0646
SHA1

ffbe96f445a90f56f5e5fe7efc773b2302f6b6c9
SHA256

2d486acb2d7f6bc9fdba619abc0513262ec00706be40236e3680b7330235f957
SHA512

778277c530122d1748eb52c3ac3831781c557cd9e3b34b502a80d969859ee2c9531996c6fafd98f008b02b75427acd9b79153e045afb12d58ca0166b606936ce
SSDEEP

12288:HabkMbha6Pj0o+i4nzz7wbXuxtetzLDmSKyK2QrfQXEyKzwki:HagCLYo+tzQejetjh5QrfQXdKzwki

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32e33bfc6db62ceced03aa6a086f0646_JaffaCakes118

Files

32e33bfc6db62ceced03aa6a086f0646_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 488KB - Virtual size: 487KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ