72f09a666eb203cbfac9ad8c47579803_JaffaCakes118 | Triage

Sharing

General

Target

72f09a666eb203cbfac9ad8c47579803_JaffaCakes118
Size

170KB
MD5

72f09a666eb203cbfac9ad8c47579803
SHA1

93d154f9483a5cd90f19afebd5192e2ff3dae80e
SHA256

9fcaf85134d765bfef0a9b1e42f82c4749252aacf35b20dabc34767d5260e45b
SHA512

220912f1d95b0f7677a8edbdd031e109c41c37c00df717dbd955e7c49baccd6a232ada68f38a68c80b1d58c6453149a187185969263157e0aa1c2dc1ff254b3f
SSDEEP

3072:AsgLu5WzQQGW2fPyEn8O2SsBMJDLVl1Rx4QODy5Z:AsIu+T2f6ULVc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72f09a666eb203cbfac9ad8c47579803_JaffaCakes118

Files

72f09a666eb203cbfac9ad8c47579803_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 74KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ