3219b2f74fd2adb49d319598a7381b44_JaffaCakes118 | Triage

Sharing

General

Target

3219b2f74fd2adb49d319598a7381b44_JaffaCakes118
Size

496KB
MD5

3219b2f74fd2adb49d319598a7381b44
SHA1

e2191dbd11a25ce75a1b853eb781904e9f1cb821
SHA256

bad4615bfce6eaedefc8e021031205c65cca471ec0b396d5f67913fdca0f470f
SHA512

2a78ba4afb6ed373558b42910caf93d9275b3fccf4d64c2558414709ed6c20d3b2ca80ff8d2c7c3354dd122ce84f0f0383b73dbe6a799e29f829f654a25380cc
SSDEEP

12288:hcu23H6ZJ+opyQaIgiEtYa6GjtyAeNBllET2E:+uwaZCjI4tfFjMBN/qT2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3219b2f74fd2adb49d319598a7381b44_JaffaCakes118

Files

3219b2f74fd2adb49d319598a7381b44_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 421KB - Virtual size: 421KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ