21d7248e43c5b1ec2a1c4468120b85c1_JaffaCakes118 | Triage

Sharing

General

Target

21d7248e43c5b1ec2a1c4468120b85c1_JaffaCakes118
Size

606KB
MD5

21d7248e43c5b1ec2a1c4468120b85c1
SHA1

4254b53017172e3a9685706c225dbaaa3a3b3067
SHA256

be8ca47a21c739e9917a8cfac0a29202e46132b7b48095e8125be9e8b2c6c0f3
SHA512

f70becbd6f9f021358fe1d0a55706f51a8690de98a268671113d1c6e9a3e3a05a50c21958517ba563901f9611b3667965a2b42a2e9f1d32fc9f99a9b1c1a22b1
SSDEEP

12288:Zui5Rri4SicJcSROY3qlDUIxFPB1YunAa9m7A1Wj01:ZlmQcVRO+25t1v9g7j0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21d7248e43c5b1ec2a1c4468120b85c1_JaffaCakes118

Files

21d7248e43c5b1ec2a1c4468120b85c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ