21bb6f351660886aa00790d870906cbb_JaffaCakes118 | Triage

Sharing

General

Target

21bb6f351660886aa00790d870906cbb_JaffaCakes118
Size

784KB
MD5

21bb6f351660886aa00790d870906cbb
SHA1

6de1361fe34047ac390592b486b700ff4516b4b2
SHA256

ba8e1609a9f31002d51e4104bb94bc1b3cfa614af93a6f7e4abd6b426972d1d5
SHA512

68f2431fd2ecfaebd3565afaed880673053958b1747d0f1556bf9355e687741efca7c179fd122b47039b2b4de8394f29d69c092e9c56b9ec5471395a8509c4fe
SSDEEP

12288:0pGBWqYNK9jUfZTpf1p13KET58iJJo29BCBasBHR:wgL9OzVK45FBC4s/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21bb6f351660886aa00790d870906cbb_JaffaCakes118

Files

21bb6f351660886aa00790d870906cbb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 594KB - Virtual size: 594KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ