4102c5992e83ebbd940a97102a76ce69_JaffaCakes118 | Triage

Sharing

General

Target

4102c5992e83ebbd940a97102a76ce69_JaffaCakes118
Size

699KB
MD5

4102c5992e83ebbd940a97102a76ce69
SHA1

eee619f852d9d544fef09226b889ffdbd239489a
SHA256

59f6d1d79be57d0ad07486bae4d98dad5d58bdf1a087ffec7f7561db424b63ed
SHA512

f14752942104f74148c708550031f58d20c7c2488ed1541271cd64116307be3ad104fe0f6698562eacc10d285b3762fa7c17028f0c2d6b55796d9f0d9259be2a
SSDEEP

12288:Mar6xcJAD8fiJNTTrRcbTVYfCGrSVxrR/9j/fi1/WT9RGns9xafhCp:R6GxiLRcbWfjSVJRlm1/WT9R99xysp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4102c5992e83ebbd940a97102a76ce69_JaffaCakes118

Files

4102c5992e83ebbd940a97102a76ce69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 562KB - Virtual size: 561KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ