196b1df426f3041d9ba51115adccfc22_JaffaCakes118 | Triage

Sharing

General

Target

196b1df426f3041d9ba51115adccfc22_JaffaCakes118
Size

333KB
MD5

196b1df426f3041d9ba51115adccfc22
SHA1

decd7f9bf74e8c0e29fb5fc6767d20384fee2181
SHA256

c898f3048b3468c816d7d03bdecbe8966fdede123ad12bbf859423e0d4c1a4e4
SHA512

00f22137ad97fafddcf891fe789bf940a40b7f25fcd175afa44788c2c3e1a61e2a16b5573d38657c3b178a66136be84044fc5908eb610d1de60c8f8c85cf2e9b
SSDEEP

6144:6NzZAv+Wy5Y7v94Odp1SEM50hO4aHjGkWgapK4haHbwTf3LDD6D+:6NtfYT94aCZTHjD4wHbEvLE+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
196b1df426f3041d9ba51115adccfc22_JaffaCakes118

Files

196b1df426f3041d9ba51115adccfc22_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 247KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ