634c5e09d0b22abf4c38b75c7968a5c6_JaffaCakes118 | Triage

Sharing

General

Target

634c5e09d0b22abf4c38b75c7968a5c6_JaffaCakes118
Size

648KB
MD5

634c5e09d0b22abf4c38b75c7968a5c6
SHA1

23c404f8d15b3c270feb998a83b292c13202bdda
SHA256

ccf997d07b3fde776fc5b0ba040d412df520eb97cd00428173c6ba8b4d04d615
SHA512

ea64959787c3b97d4099af25e96c9ddc85e882807d023710089a8bff1b16be6d205279104100b80fd8aea9deae6dfc784d0db2a587bbb524202f43a72b8a19b6
SSDEEP

12288:P8EWE2J85TjMDvpVlRw2+xU8qCwL9FBOjBfgLg:P8D98KDvpfXy1qTpDOlf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
634c5e09d0b22abf4c38b75c7968a5c6_JaffaCakes118

Files

634c5e09d0b22abf4c38b75c7968a5c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 544KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ