65491b424f34f64e4245247c4a5db8d4_JaffaCakes118 | Triage

Sharing

General

Target

65491b424f34f64e4245247c4a5db8d4_JaffaCakes118
Size

186KB
MD5

65491b424f34f64e4245247c4a5db8d4
SHA1

829d2eb56e44dbf8f9e3749ae8ebfab8bdd4804b
SHA256

ce968bcb32600b4e42e954e2978d08f41bc7576fa1eeb6715748395313b23d24
SHA512

599f1a655013d9120c27b1ad57c40a1b9972dd99a0899088807738f427b100914ed30ba20e1a50aa2398a7a7a1cd1fc27987523fccb13067a14d886be258b750
SSDEEP

3072:O0dZno398sPeyOa+T/zs5REgwLAJCG5WURMWe+7Y1equnD3CoGMqqDLy/5swPDBi:t3oneYREeGW7Y1lotqqDLu53

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65491b424f34f64e4245247c4a5db8d4_JaffaCakes118

Files

65491b424f34f64e4245247c4a5db8d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 66KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ