18ef156baac8595383918c96ebc55f59_JaffaCakes118 | Triage

Sharing

General

Target

18ef156baac8595383918c96ebc55f59_JaffaCakes118
Size

7KB
MD5

18ef156baac8595383918c96ebc55f59
SHA1

d7fd166a7d8e98cab496bd4a9b1218590e477ffd
SHA256

3cf8ee203c98cf73cbf9bf01bc141c41a4823bbf20bb668a8d955fbd7fa7d5f4
SHA512

05d5f312008a1237912ff4879ddd83dbeed126862ad02380470e3e29249c07ebc7359a07624fc0ac38af1657f0da0459b76b337f7dee00401c8368ebd1129bd7
SSDEEP

96:nPhCG238y+U47KdZuZGto8FcZQnKUxrTvCZPkaqx9laTWHXJ:nJCNh+X++S8QnKgvCZP/qjlaTW3J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18ef156baac8595383918c96ebc55f59_JaffaCakes118

Files

18ef156baac8595383918c96ebc55f59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 406B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ