61601960ade2a87b760828afd850b114_JaffaCakes118 | Triage

Sharing

General

Target

61601960ade2a87b760828afd850b114_JaffaCakes118
Size

11.4MB
MD5

61601960ade2a87b760828afd850b114
SHA1

c055b71b3328cd82a7d999d13632ff6af4d99c54
SHA256

fbf89e78c4e5e2d5b9ce571df52c80038529ad854a476e150a7994ae48053d9a
SHA512

08729941507c25391798492d20a2321b798aa24b4d7f5786c69b175495d5cedd845d56f6fcabdc0b3c645914b335cc320ffba6eab860ed7cf285ecd909ffc6b5
SSDEEP

196608:MIXUksUy0IVCA0AXCkCdm8Mjv7Hhf+Gp4X6n0nRVynXnU2cw+yz/oi:MuUmy0Wj0AXis8MT7Hp6Kn0Ly3UXwtoi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61601960ade2a87b760828afd850b114_JaffaCakes118

Files

61601960ade2a87b760828afd850b114_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 972KB - Virtual size: 972KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ