477736e1a06bbc96df7a8a5730a27085_JaffaCakes118 | Triage

Sharing

General

Target

477736e1a06bbc96df7a8a5730a27085_JaffaCakes118
Size

781KB
MD5

477736e1a06bbc96df7a8a5730a27085
SHA1

a303f3697cc0b864de9d7a610982d986787d23b0
SHA256

dd87ce5add8927fdb27aa6b620f13f29d1df03c4872d92a01c71a5a7fc33c1d9
SHA512

29f5831449d197da4c16379e352796f93fa75fa9d466129fc1fa6819abecb69d5f846e3644fe5c0fcf481808c5349d228c45601ebf53fe5164ecec41ac7c8ad1
SSDEEP

12288:ekMtDFCAJLx8n99Xl3LjFVhg5F7wxHVnzPcV26n4L7+dHaMw2u7J2E:ZMnpA9Xl3nq5pC1nzB6n++sMw2u7J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
477736e1a06bbc96df7a8a5730a27085_JaffaCakes118

Files

477736e1a06bbc96df7a8a5730a27085_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.bss
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 759KB - Virtual size: 760KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE