486bf441f9d5959484d7cd427596e87b_JaffaCakes118 | Triage

Sharing

General

Target

486bf441f9d5959484d7cd427596e87b_JaffaCakes118
Size

494KB
MD5

486bf441f9d5959484d7cd427596e87b
SHA1

9195e80977dfc86e969bb2ee44a61582e90b5bbf
SHA256

cfdd321c1d28ec98f7c5fdd8234f0503e1862c0a8852301097bf0d90f9b3f709
SHA512

7e3792c04fff67ef14bf8d2092ee7f7081ba89c79a0bce5ab4f0834c7c9ab44b2a7e14b1b6db8da92478baab2cbe197f75b55566a44d20a0efef3d6a0a89ed4a
SSDEEP

12288:aqJ11GukzKPZ5vJNwsvfCTOMM0TLy0hxSFw2XTh8X:JTGvWhGsSq+PCC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
486bf441f9d5959484d7cd427596e87b_JaffaCakes118

Files

486bf441f9d5959484d7cd427596e87b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ