197fe648c0b88d2afb845227b78cb0c3_JaffaCakes118 | Triage

Sharing

General

Target

197fe648c0b88d2afb845227b78cb0c3_JaffaCakes118
Size

38KB
MD5

197fe648c0b88d2afb845227b78cb0c3
SHA1

a68d9e1cc7d97f4be1406c51fe90270e71b218a7
SHA256

af25eeb3cd6abae272c8a23ad20dcec222d46f2b7c5929edc3f8f97e976d989e
SHA512

2ced97c996e3e892edde91095bab6d3d303c5e368f105c0f20ab5a584ab0efcd0eace3230b956508c1dee641652b0e9e1245852130df9056c7541f5dd55e312d
SSDEEP

768:V4tNkbv5HEm3vCU+TZg0iedbyYiQYX7YBmuxRP:V4tNmv5kmaLTGnecblLomuxx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
197fe648c0b88d2afb845227b78cb0c3_JaffaCakes118

Files

197fe648c0b88d2afb845227b78cb0c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 865B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ