324fb7ba3ccbf7db9baed8456daae8b4_JaffaCakes118 | Triage

Sharing

General

Target

324fb7ba3ccbf7db9baed8456daae8b4_JaffaCakes118
Size

188KB
MD5

324fb7ba3ccbf7db9baed8456daae8b4
SHA1

e4d4c3a1308d34c01963199ad4e2ad83177d6efd
SHA256

4806c4a2d3bd301e31d027cc4d55b9ac27aa617271fa5673599afd706a9db45e
SHA512

08af97e04faae3dfcf9686f4ba927e9405fa99282a1c69bb548ba98a7b017883148b072e7474295c47ebd475caede5649370dca9c1b6dfe86970231646ad9a29
SSDEEP

3072:lcS/1nLl7vZw0ckvNCcQCUl+uMXdurhXx2t40S2ohsW7/1EcfUCCvbmjjRiQBrEI:lcS/rv/C0vu9ECsQEc8CCvbmjj9B3AFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
324fb7ba3ccbf7db9baed8456daae8b4_JaffaCakes118

Files

324fb7ba3ccbf7db9baed8456daae8b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ