61cab74814fcef35eaa38b733e25f170_JaffaCakes118 | Triage

Sharing

General

Target

61cab74814fcef35eaa38b733e25f170_JaffaCakes118
Size

1.2MB
MD5

61cab74814fcef35eaa38b733e25f170
SHA1

25584e238d6420ab428abd1d8a94f9d92d4d86c1
SHA256

10fd3f63b0fae5a374ee1f527366811dc9b775700c583cf77b3e3d57c4f4dd69
SHA512

f1f55787cf78e277fcd66d59d54a49405d1f8afdebacede660f092a3d0a204497717b90fda668b30e40868436fd36beba85b2f1876f5bbf2d3f9ed395c5a6dac
SSDEEP

24576:I0JIhu3ALKHS93uzxh9YJrZRnmKHPtpULMVU6Fj05fTZUQW8H5uttWYeC5DhCjD:IvwuKVe7P02JAk86QM0jD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61cab74814fcef35eaa38b733e25f170_JaffaCakes118

Files

61cab74814fcef35eaa38b733e25f170_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ