323a2a7f5673b0706150e1294f92294d_JaffaCakes118 | Triage

Sharing

General

Target

323a2a7f5673b0706150e1294f92294d_JaffaCakes118
Size

860KB
MD5

323a2a7f5673b0706150e1294f92294d
SHA1

cd06d9daffb3b8aa0bf75a76eef87cc7f7fba1f5
SHA256

5d0db247c47bfab326bfadbec261451b24be71805424f739b59c477586e47696
SHA512

c3bfbede85e70b56c7fe386dfc0f2006c122fdc3745c28a83fd91e5960fe97346673176e28aa05c402511c0d4f31ba5d48c99470012e43f594236b515cf42e84
SSDEEP

12288:sAhRedmSasD09x80nC8aQqxxONYLF1q6G/+kwr6aN5WD+kaYUbDXTTiJ8CBNlLBU:sAhRKfasYxv0WWHqdy9rTiJHPy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
323a2a7f5673b0706150e1294f92294d_JaffaCakes118

Files

323a2a7f5673b0706150e1294f92294d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 730KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ