067057cfec601f419053f3494959d611_JaffaCakes118 | Triage

Sharing

General

Target

067057cfec601f419053f3494959d611_JaffaCakes118
Size

360KB
MD5

067057cfec601f419053f3494959d611
SHA1

feb0aabd701481a02494a077942d0438d61bc5dc
SHA256

918b61d85f70c15aad27f67998b59867bb893a21b7c26e0985cc3e06a1ceb71c
SHA512

aa7c2ab9e97e2ba7f519dcfafcedfc6c68f750212b1612a110c385c064b74f0fa7af720e45df6edc68374f1886c0df51e77143b6a55e9d0f7117426ca925e319
SSDEEP

6144:OzVp8Db6NO1lo9RNyjlDhCSqJVaRjniPNe++u/a46AfyK4Zb52l:gpomNO1ivyJmVaR8+qa46AyZi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
067057cfec601f419053f3494959d611_JaffaCakes118

Files

067057cfec601f419053f3494959d611_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 302KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ