21176a3bbb30840d08ecdb08fd58c702_JaffaCakes118 | Triage

Sharing

General

Target

21176a3bbb30840d08ecdb08fd58c702_JaffaCakes118
Size

46KB
MD5

21176a3bbb30840d08ecdb08fd58c702
SHA1

9a52060e04d5366a5513383e3cec01d9aee15bca
SHA256

c8a4230f6a35d65b74e55de74ab24850c9e099c3f37d58f926bd03ee46221056
SHA512

975f6909033b2d09fa6a6913c5c5c2708e0500df03c5718353430329c92127b7d8593604c38b0d337f5436892111e7e84b6654b7825a333b63f2bb40c718b3cc
SSDEEP

768:ZfJ8N5ptrwChYCO3O1gf9I8DqRgu72hSpUglkcCyQBvrqtKmILXLg1Tt:Zfw5ptsOZ8DsChjglfCyAOHg7st

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21176a3bbb30840d08ecdb08fd58c702_JaffaCakes118

Files

21176a3bbb30840d08ecdb08fd58c702_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ