21704bc166824f33f340ff3374eb448a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21704bc166824f33f340ff3374eb448a_JaffaCakes118
Size

400KB
MD5

21704bc166824f33f340ff3374eb448a
SHA1

5ea97a2ae7435fe0df9b75d7b5cf475a99c502da
SHA256

99db1d3bbaa6740a335c5f89ad5522a0a3ce4b7fe63012e50cf3243ffd347f59
SHA512

d76fbd7723b9ca1a725e72ef4804db280c2c47aa15b8d74891d668570f973a02ff6b47140cad145808a6c13f7fdbc50fa798ae62b3b587118b13c5813b3e38f1
SSDEEP

6144:LLPCfV2sT5AWNgqSCFpE5ICCEHB/hy6x0ut5/8mbo/gpmrpddi3PMW8A0OCl:KN2sT5AW2qSCFD4/nGutygspCUVDOo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21704bc166824f33f340ff3374eb448a_JaffaCakes118

Files

21704bc166824f33f340ff3374eb448a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ