18251ed4cb74cac64662ccbe1b82bdf9_JaffaCakes118 | Triage

Sharing

General

Target

18251ed4cb74cac64662ccbe1b82bdf9_JaffaCakes118
Size

9KB
MD5

18251ed4cb74cac64662ccbe1b82bdf9
SHA1

8a12ae7dbd28b4497681f906a4cb90f2b4f40e2f
SHA256

4318a858d2be3593a44a982e072b721e97f8505b57812e1a456f43dd1d0f31c3
SHA512

5fe8ad9f90e14f38c966bfd407c6d4a8a13943a105b4d5455641b55dc1461df6edd38f46c97177d4450eba4f6f1ee30d0298dd40a69f0eacb3620e54bf55ebd6
SSDEEP

96:0P2EGQp2dvzvF7dBfjFJPzvfdEJic4ZandsrRmKBmmzyeSNWKGAbwHMEkcIjcxvG:0+EGRVB7d97vfVZaG5ryxNWKXbjExn0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18251ed4cb74cac64662ccbe1b82bdf9_JaffaCakes118

Files

18251ed4cb74cac64662ccbe1b82bdf9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.init
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ