b796176897e9fb68469ac938826caa38_JaffaCakes118 | Triage

Sharing

General

Target

b796176897e9fb68469ac938826caa38_JaffaCakes118
Size

121KB
MD5

b796176897e9fb68469ac938826caa38
SHA1

10d11902d310b359c04ec9ca161a3561e5674900
SHA256

0709785f6212731f21bea7b65a89dec9348051a57766456158f3b0ff790d771f
SHA512

ea005da490331522498e860cd6b163d486389aef068ef3139b48226b1fd1388bfe993fb1a80c2c623a53286b0ff53d645a8a5c558f0a3353b21268c87e5a18c0
SSDEEP

1536:HK0PCroFWiXZeWUg7vsLouJ1gJcxWGd+oryMm+HQUg5cs3Yx05:pXHUgDsLofOWGd2Mm+HQUg5csJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b796176897e9fb68469ac938826caa38_JaffaCakes118

Files

b796176897e9fb68469ac938826caa38_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 180B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE