44e9bf566f79c5fc010af41a2e37f341_JaffaCakes118 | Triage

Sharing

General

Target

44e9bf566f79c5fc010af41a2e37f341_JaffaCakes118
Size

481KB
MD5

44e9bf566f79c5fc010af41a2e37f341
SHA1

f46d17291cd852afc6045b1209d9fd6697e2fba5
SHA256

faf312df2b0f665613f0c01aa97b33e208229bca9034ab46c502cfa55e942735
SHA512

275c5cdaba4f9074da7e76b96403e19da259998919946dc593f94b40b8fb5c6f9a69aa6f2c3aacf9178e34daa6b32d4971f652a75f790519a363137cebc03b07
SSDEEP

12288:1rF9UdWrh/gvWlqr5lJecJTSU9Y+T/nP:JFydWSvWOBs+T/n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44e9bf566f79c5fc010af41a2e37f341_JaffaCakes118

Files

44e9bf566f79c5fc010af41a2e37f341_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 333KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ