282e83a47cadd432656033053c4eb4d4_JaffaCakes118 | Triage

Sharing

General

Target

282e83a47cadd432656033053c4eb4d4_JaffaCakes118
Size

588KB
MD5

282e83a47cadd432656033053c4eb4d4
SHA1

16d29ca4051379923ef0702ed6cf088814365f2a
SHA256

975745f7e3617145c837aeecb71eef5103b850981b4717df539b530e04203e7c
SHA512

08de471da7bbb29f360f7175100c2a8fd305d09c3c8b7ec4c9066c118f8dd1d67a8737b012cd19e44bdf3006f81204bff17ee08f74225c813a23a54c55ff898e
SSDEEP

12288:R5UDehRBVwZ28uUmL2fxPZGV88sMzUZaxSr7eqNrjs7v4et:R568R18uUmMLGTd8G6eqNrcv4e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
282e83a47cadd432656033053c4eb4d4_JaffaCakes118

Files

282e83a47cadd432656033053c4eb4d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 510KB - Virtual size: 509KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ