61c19403ae64a9e68a58c8a6ac251fb6_JaffaCakes118 | Triage

Sharing

General

Target

61c19403ae64a9e68a58c8a6ac251fb6_JaffaCakes118
Size

1.1MB
MD5

61c19403ae64a9e68a58c8a6ac251fb6
SHA1

a4a0fbd895bea63cbc55f613aa1988cf109c379f
SHA256

158d088b5e0c775c92b3e65946656f51e1fa0b29db5b42b7825d05d23bce9519
SHA512

77cffea6a10c0ad7568706635d6a6651b8f710ed285ed6106886e3ed771139cc15e9b81e0671681b248e428e64c1444bb9bd9f409756104bb9b063ea7f0f6fbc
SSDEEP

24576:JptoJ5/fru1b+H5Q/m38q5MRkRi+irszfoTsBR:rtoX/fYb+Hm/m350+iw3v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61c19403ae64a9e68a58c8a6ac251fb6_JaffaCakes118

Files

61c19403ae64a9e68a58c8a6ac251fb6_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ