2639c368cf8f9c1a271340702dc9c515_JaffaCakes118 | Triage

Sharing

General

Target

2639c368cf8f9c1a271340702dc9c515_JaffaCakes118
Size

97KB
MD5

2639c368cf8f9c1a271340702dc9c515
SHA1

bc23e5f44faec55878d4c9119f9cefb7f71c73ca
SHA256

41fa3d44960414c920e6d5f8bd30c994b9784e991d47b861a3428cceea5203c2
SHA512

c917d79ac4e4343ed79294f62ae9f5472e87dd628e73b299d5cf1c4a4739ab85ff2328db3e6b624a6a91b847701e77ba1354265d7ace0fa05a87e3b732ae25bc
SSDEEP

768:m0LGpjli+mDCfsT1UBNGb1UhoElv/3w5BS3vQSlzfp1RkTyP3Ieph2dDQ+FNbMDD:m0LGpjhAFKNB9lH33VTp1RkWmE6Nb2QY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2639c368cf8f9c1a271340702dc9c515_JaffaCakes118

Files

2639c368cf8f9c1a271340702dc9c515_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 276KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

micr_oso
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ