189407f57d6b8749babbe85ea65e045b_JaffaCakes118 | Triage

Sharing

General

Target

189407f57d6b8749babbe85ea65e045b_JaffaCakes118
Size

182KB
MD5

189407f57d6b8749babbe85ea65e045b
SHA1

76a439f6bd5caa7686e2dea5c3c900f5797f47c1
SHA256

9b5ff137a839fa2e5ebd4738869c06ed8af03f7bd171fc79ead86e57e70cc0d7
SHA512

642ca3865c844590ca16225fa47c78c0a16c6136525b12c93b254605311397b8ec7b6a7f254e829dd07d4e92f7f7b7f4c241daae80faf9aceb332921c737d550
SSDEEP

3072:L86dbPrrPM6jKn/+QC8iL/aLTll9ZP8Lcg+LUoFjnwt5jeZUHmHy:PFvPM6jU/+TL/aLTl7ZP+cgFoFjn+QqV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
189407f57d6b8749babbe85ea65e045b_JaffaCakes118

Files

189407f57d6b8749babbe85ea65e045b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1005B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ