085f719b80fa6686d1eb60b7e8c53993_JaffaCakes118 | Triage

Sharing

General

Target

085f719b80fa6686d1eb60b7e8c53993_JaffaCakes118
Size

118KB
MD5

085f719b80fa6686d1eb60b7e8c53993
SHA1

cfd5dac9ea5e4d2b802727afd7e7de710c80b73c
SHA256

2deaf76719f0244ee180aceb6758289da67bee5baf00504c3a1a98fc0021f64d
SHA512

576b364ffbc9c9126222afef30d9c5013476e67f4b6a45fa6e3d3d1e547c1cf0815d63bb5168f568da2fbb39423895e47c1256a16c7eb0c7f9f8e0f0941f9903
SSDEEP

3072:3DetgVbU3JoJg+Q1e2kpKKZi5e8oieFlljzkR9kBYwmgLLEG:3Detr6Jg+j9j5FzzBxLLP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
085f719b80fa6686d1eb60b7e8c53993_JaffaCakes118

Files

085f719b80fa6686d1eb60b7e8c53993_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

code
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bss
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ