213e465db6745632e0b298b50efeb1a5_JaffaCakes118 | Triage

Sharing

General

Target

213e465db6745632e0b298b50efeb1a5_JaffaCakes118
Size

405KB
MD5

213e465db6745632e0b298b50efeb1a5
SHA1

b16a87bde83e0676e59a8bddf9d8855f1daf911f
SHA256

4732a0683654ccadf28ac3ab49a96c3a5169a95e0528ab7239795b2d5cba1fd7
SHA512

cccb5b56b7c28e44609ea202ce0555ef6d796c00b0488f3a4d9deee90f499d1333432c1ea101e920b9f0a8eaff8c657fc0808293b8c08c02eaafcc28e314e754
SSDEEP

12288:fVc+QMX4DWOulIYbEIBj3kirMzNn4MAN:NZp4KOujbLj3kiIJbA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
213e465db6745632e0b298b50efeb1a5_JaffaCakes118

Files

213e465db6745632e0b298b50efeb1a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 335KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ