445679617c50a72f3073cf0fe62780b5_JaffaCakes118 | Triage

Sharing

General

Target

445679617c50a72f3073cf0fe62780b5_JaffaCakes118
Size

194KB
MD5

445679617c50a72f3073cf0fe62780b5
SHA1

d8b2efa6579127a83fd06168581a27e389efbbf1
SHA256

033c9aeaecab2385de1f486d511c7df7f7f3d3d30b8a5c61a985c783257bc678
SHA512

82ee627b07ec8bf90cf226b87815cf26a801198bd7f47bac81c7b11f7668accfa99d2b336fd471381980a0117eb02fe95a2a91cd60705799eb9bb3685caab69a
SSDEEP

3072:l+4O1Uzr8l074zA87QCrq+816mbhdqlJtpuvBOQakq6:4cP8o4zACq+8oMhYFs1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
445679617c50a72f3073cf0fe62780b5_JaffaCakes118

Files

445679617c50a72f3073cf0fe62780b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 424B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 28B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ