aa40c4ef4b203519caee4277630754e4_JaffaCakes118 | Triage

Sharing

General

Target

aa40c4ef4b203519caee4277630754e4_JaffaCakes118
Size

1.1MB
MD5

aa40c4ef4b203519caee4277630754e4
SHA1

5c1f63e4c7508c4acbcce75cc774929353fb649d
SHA256

ec9281b1e4cbbcb084368da146fd13f55d33aa8b7d8214cadbc0f6b707ef893f
SHA512

fa97ca4d10bd262c48a7bdaa3be66f9e3584e3bcedecb57c263edf8bcde5feb73f4a204582044c102adcd88152765b3c97ded6dcabe0283f0cdbe236e30f18a2
SSDEEP

24576:iFBrny7d7eqq2Z32fy/VCTK9kM/wAG8qJ5A0Cr:i4kV2h2fMgTK9kMXFqJ5ALr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa40c4ef4b203519caee4277630754e4_JaffaCakes118

Files

aa40c4ef4b203519caee4277630754e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 517KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 435KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ