62b0a9c1e32e46d1c8c739c5dff74106_JaffaCakes118 | Triage

Sharing

General

Target

62b0a9c1e32e46d1c8c739c5dff74106_JaffaCakes118
Size

813KB
MD5

62b0a9c1e32e46d1c8c739c5dff74106
SHA1

83c3935b6e232a9f44e19d11ce326e1de8c6d095
SHA256

0b6e478b61ca8859f8b1248eeef881f89ffd2e8b08f59b0d653157af3ed75fe9
SHA512

bc38441a193bd9e1d26adf5e2b1cfee3c25dd8057e5237e99d652040a07cfd727651573b831c17356f0c4b7dc2eb25195b8b0b468ae3f3dedf99cee542c023aa
SSDEEP

12288:OMT348TB8ComcHBKUeEuRnjpfKqDnmqgQf4yA9mGGUJDD3Swsvtcbmxs:/jbNS9elRN5dgqGzDD3SwIcbm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62b0a9c1e32e46d1c8c739c5dff74106_JaffaCakes118

Files

62b0a9c1e32e46d1c8c739c5dff74106_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 571KB - Virtual size: 570KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ