22e9df3c203a691cb1409b374645f830_JaffaCakes118 | Triage

Sharing

General

Target

22e9df3c203a691cb1409b374645f830_JaffaCakes118
Size

491KB
MD5

22e9df3c203a691cb1409b374645f830
SHA1

2c463775e95906b9d014571f6e7ac20b90f400d1
SHA256

d8c6c8321ddf595404e891e622bc166c7ca830ffcffc77251ce905adf4d8062d
SHA512

3642dbb576979045914e31918134db431fd12b3be6dfc3b2c91ac081a67d8c0d07202b588bbfd7684ca603b89e217ce333f48e83830cf05fc42b0165ed82aea1
SSDEEP

6144:5MM1+RyYp+BkmHsjqxkgSOItqHZ9BDQs72DeZUpBbHVe1EX3whZ9ez5YH2qplj:GR8Yp+BkmVrLBDQnHU1woVn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22e9df3c203a691cb1409b374645f830_JaffaCakes118

Files

22e9df3c203a691cb1409b374645f830_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 388KB - Virtual size: 387KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ