064ab238296459379ae09891e3063b15_JaffaCakes118 | Triage

Sharing

General

Target

064ab238296459379ae09891e3063b15_JaffaCakes118
Size

86KB
MD5

064ab238296459379ae09891e3063b15
SHA1

09851256ed8a8bf927551416ef847fff8ddc49f9
SHA256

7b6b1e86c0de2efda1666b58fa7d43bc0eac2914f5f3eb19bc82c845e5a53b10
SHA512

42a4ecf100cf4bb502c90c9ec0ae1847167517baaf2c3efb854fc96127461cb459199ebcc035150da646b269a91a78c7ae61e749c7673e13958e24f2fcb051a6
SSDEEP

1536:MBjslXVB1WRydFMQacilWJ6VY0iEbOasbO4Wx4RcRqDRoQU8+FTXe4oTTtE18fNt:MBEn6QRoQUHXe4oTTtvNio/YU+2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
064ab238296459379ae09891e3063b15_JaffaCakes118

Files

064ab238296459379ae09891e3063b15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ