416c483c0601e90fef324c707c44c884_JaffaCakes118 | Triage

Sharing

General

Target

416c483c0601e90fef324c707c44c884_JaffaCakes118
Size

1.1MB
MD5

416c483c0601e90fef324c707c44c884
SHA1

b44505d4ea90dcdc13e9bda4c6bc06caa4fa5070
SHA256

67cc6e00e347ed7d5faf9dd7066206b82cfc81290d108bf70d4242e4c833e853
SHA512

86d16aa07bea15a1ccdec69643e1de4980b2230790f4138df8de50527692584111287d34fc1ad77fcd14981f69239cf789e9543d53f066b7dfbadae001595842
SSDEEP

12288:RitwUz3r/ezh2BJIwDHmWf42j28N+lMMaeIf+u2rHbRW7rrPssir8eENAp:Ri+oQhk04ljNPNsMrrPssjyp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
416c483c0601e90fef324c707c44c884_JaffaCakes118

Files

416c483c0601e90fef324c707c44c884_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 670KB - Virtual size: 669KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 365KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE