1549e4673531aefd4daf765e35247205_JaffaCakes118 | Triage

Sharing

General

Target

1549e4673531aefd4daf765e35247205_JaffaCakes118
Size

454KB
MD5

1549e4673531aefd4daf765e35247205
SHA1

a2a94282db52615df2bde3659a39c731b46d6cd5
SHA256

1c6c28d40f6e0afbe38a7a8d3975410d12a37864990e4b7753bd99b681506fb9
SHA512

8d62cfdda5018857a2609b38c10381373f1f38dd2051258e4f6d8a135bffeaf6fdefdc8b5f703488c0ef796dfbee5e4c3c1b1a3128f4a51d155b9c655c7a17f3
SSDEEP

6144:4nk3e5+Bf44O4Bi8SvDz4iJ6/1CTYvhbtlUmz++S+MTp1Fwu+tFxF9t+EeeeuqMs:h3e5+BfO4BiL7tI2uWTp1u7ftxe2qSS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1549e4673531aefd4daf765e35247205_JaffaCakes118

Files

1549e4673531aefd4daf765e35247205_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 379KB - Virtual size: 378KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ