69a3c94c586df5acb75967f1c97f79f3_JaffaCakes118 | Triage

Sharing

General

Target

69a3c94c586df5acb75967f1c97f79f3_JaffaCakes118
Size

985KB
MD5

69a3c94c586df5acb75967f1c97f79f3
SHA1

9bb3961a41c2afe325b6f615c6a6e7da07a6784c
SHA256

4358764628ddb7a8272093b8923525e48877e7910049a7d00d71476a51a87765
SHA512

b447714ce4e6ed4c82cb5bea5c345657b262c41e22cfc47e3f84917afae0cc4ef0fc4812f7c167d7969ffe46512edd5c9214840f975e71929447264435cb6f4e
SSDEEP

24576:PrYUhzRsCg6Yn++QKSqW7gmsjFLke4gM2me1jnMlK:D+Cg6Kbb/W7GL/glK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
69a3c94c586df5acb75967f1c97f79f3_JaffaCakes118

Files

69a3c94c586df5acb75967f1c97f79f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 402KB - Virtual size: 401KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 444KB - Virtual size: 444KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ