87db0c2590d78c3a5a75b7e7ea424589_JaffaCakes118 | Triage

Sharing

General

Target

87db0c2590d78c3a5a75b7e7ea424589_JaffaCakes118
Size

14.9MB
MD5

87db0c2590d78c3a5a75b7e7ea424589
SHA1

87a9ecfb35b0672f4ebaccecf09f5fc3455b1d45
SHA256

337ca4a824894da7338e4130bed5cd57f79ad4553508adea3061281855c102e5
SHA512

cb1106d6f2309524c8bf00c0017b7d84c7cae14dbc8d4c9b31666f8b71d2f7ed22c1f5ee837439a95ae80b63bbf640e8433ae855c0ccbde2519df9d441be3646
SSDEEP

196608:4XKppkidptQ85y3UxbMb4zf54q8wzf5UCClC3/dIfkQt+0aSWiV89RSABWk6TXmT:y4pk5t3UD75r5ACPGfkQJW689MX6UU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87db0c2590d78c3a5a75b7e7ea424589_JaffaCakes118

Files

87db0c2590d78c3a5a75b7e7ea424589_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ