422587b5077b621f0d750671c2c0ffd7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

422587b5077b621f0d750671c2c0ffd7_JaffaCakes118
Size

1.5MB
MD5

422587b5077b621f0d750671c2c0ffd7
SHA1

fd816af20653c0a3c738689cef58bce753728d0c
SHA256

49064e39cbd0f3727a1c274101683a44d2e4b59588d696909887f74c007b3a67
SHA512

1977a461d48879ae35808cb9039bb5bc0be5fee9288e401e9dbb50fdcb88e0b10d5233c73a67daf376e95185989a5eeec363f76923590544568999045f15a71b
SSDEEP

24576:QfB4s+kYuATfuXItj90NMW4vR7KDE2adhQwkdb7dGZrmFJokTOj6aeNqIQtKGXp9:aBmZ/HQRb7OrmnokyjCNGZXxyoSOD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
422587b5077b621f0d750671c2c0ffd7_JaffaCakes118

Files

422587b5077b621f0d750671c2c0ffd7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 423KB - Virtual size: 422KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ