3055031657ae9a4b62566e8499258b36_JaffaCakes118 | Triage

Sharing

General

Target

3055031657ae9a4b62566e8499258b36_JaffaCakes118
Size

372KB
MD5

3055031657ae9a4b62566e8499258b36
SHA1

599cd5fbc2bee1f894cc0a9f3440f55fb1b47ab9
SHA256

5ce7e2c64da61ca99e056684c9b7138359123e45ab409ce311e7d29fe5a75187
SHA512

f08494eae3d07be2a3406aad48f37f22fb47b61958bc54f9ed555134a72cbd31815ee6d706cda6415c525c1aa28b185392994ec2e9b36121f3ff81ddca65e9e5
SSDEEP

6144:4zcXIA25yVQeF1Bs1avosQVTH5wEi28F6Qyuz3Y/Bae08v4PBUE:vXIA25yVQiqwoTXR8Fu/0PPB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3055031657ae9a4b62566e8499258b36_JaffaCakes118

Files

3055031657ae9a4b62566e8499258b36_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 322KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ