1684a757e78f1126fc2e7f265d4896fd_JaffaCakes118 | Triage

Sharing

General

Target

1684a757e78f1126fc2e7f265d4896fd_JaffaCakes118
Size

594KB
MD5

1684a757e78f1126fc2e7f265d4896fd
SHA1

77bd9d48ba77796905e5560d8f889da6fed96ccc
SHA256

cbf705f91976d99e6748ca3e405a69e30bff6b89a559e7c4d4babd4f87559dc2
SHA512

0b0215392da0502b8f8cfec6acd4283dec679e7b9393666b4fe53ce5910ba70463465828cb3c80f3a1e313f59285cd655f2fe79f86e39b26a71e1f970b461e15
SSDEEP

12288:dlpsiLzoMl3HZCGnnBk8IbR5D6mMpEpDNq0WCc1xk:dlJ3/CGnnBy79MpERIMP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1684a757e78f1126fc2e7f265d4896fd_JaffaCakes118

Files

1684a757e78f1126fc2e7f265d4896fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 516KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ