409550fbcfb1288a1069af79d62f736d_JaffaCakes118 | Triage

Sharing

General

Target

409550fbcfb1288a1069af79d62f736d_JaffaCakes118
Size

756KB
MD5

409550fbcfb1288a1069af79d62f736d
SHA1

7d1c5335ec90cc41981670a7b2cd1cc1eda69bfa
SHA256

afcab39ad345e38679b1874835b1188c4a0b6329571b419f0165e8d7aa8027a6
SHA512

227e9ddc1b95defb9914891da5a6ca8adf960844717df4a0ce9f8f980c74b010e61b3798a27ca92bf6cc4acc875c28b34717bb207210f5e6cea3ad1e3a6a0c11
SSDEEP

12288:Zqh/utG3B86oHSodyv9PZGyVZiheMpsJZZHWiveSUiYTUO5aauVzo4tc3PAXs:oJA081HSoEXZUTnT98ams46AX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
409550fbcfb1288a1069af79d62f736d_JaffaCakes118

Files

409550fbcfb1288a1069af79d62f736d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 641KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ