21b5456719bfca56fded1420a627b062_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21b5456719bfca56fded1420a627b062_JaffaCakes118
Size

1004KB
MD5

21b5456719bfca56fded1420a627b062
SHA1

f98c8de765347c3776fe3778b1a443397be47941
SHA256

d61278175d95d801019a15692a338d3e57d822a0e36877d23e857af4b693ea6f
SHA512

69a06012e76441eec24138a4a8545bfac3967881a0218fe6f245ad3c630f71868a6884f11085ca89a04a65c9d31d50bb0981498417f12ea2086a521450bcb122
SSDEEP

24576:UfFR3P8g9x7DEUGo8H3m5vFBYPnhqpAZvVM+3vcNeAau2n:UfHXfEUP8kFB6BZvLCeAauA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21b5456719bfca56fded1420a627b062_JaffaCakes118

Files

21b5456719bfca56fded1420a627b062_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 977KB - Virtual size: 980KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 431B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ