243d59ff3b6f62c1f7b6f72d07961f77_JaffaCakes118 | Triage

Sharing

General

Target

243d59ff3b6f62c1f7b6f72d07961f77_JaffaCakes118
Size

1014KB
MD5

243d59ff3b6f62c1f7b6f72d07961f77
SHA1

345cf35adae872775cf8949f22fdec2d5864bbf1
SHA256

07799252c178ea477795a5a51f68a31d9c68f2e1c637955d2a293269f57d9d74
SHA512

18c046d5d31b559b96744ca402321737569181cc7df25c5489fb13dd63cf7fb4bd504fe4c9eefe296f582fe0b52e580355a94dfa1e8c34d4ba4c67fc66157efe
SSDEEP

24576:VY0iF7lv4a9vyRvrD0ahLP9xH01rkoi8:GbF799Kh009B0pK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
243d59ff3b6f62c1f7b6f72d07961f77_JaffaCakes118

Files

243d59ff3b6f62c1f7b6f72d07961f77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 787KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ