32880b095d8152d486a3de42cbd65d35_JaffaCakes118 | Triage

Sharing

General

Target

32880b095d8152d486a3de42cbd65d35_JaffaCakes118
Size

1.1MB
MD5

32880b095d8152d486a3de42cbd65d35
SHA1

248a3c0787fda926ef4bc03110901b9fcbf69ac7
SHA256

ca74653b78a425c49ba25d0ed0e979dd28e401fefbb4f8ebf8de6cd5294b48ed
SHA512

a7f481dfda74fedde936b89a960aaf3f97fedef9c960a37bda53f68c2acaf362f6b8c18e6f02f3d0e1eb7dbd7271c0ba751a33db7de93db54118f47eb93c550f
SSDEEP

12288:aRVBjal9FDNtJdk88+xx0DqXJkwB0ogFnpo+1HyzxpuZUK/ubz9K7AD2/ah0mChq:qXj2ftP6yS61LCRm4Mb401EhZbcgKUb+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32880b095d8152d486a3de42cbd65d35_JaffaCakes118

Files

32880b095d8152d486a3de42cbd65d35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 779KB - Virtual size: 779KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ