634cae07506d76a3efde94d101c028f6_JaffaCakes118 | Triage

Sharing

General

Target

634cae07506d76a3efde94d101c028f6_JaffaCakes118
Size

989KB
MD5

634cae07506d76a3efde94d101c028f6
SHA1

b2f19310f8700255041931aeb6e90b8c459ec6a9
SHA256

491f3ae869252a9303a52f99d1b50f99ea1b17e5ff5df6083c31bf0f700379bc
SHA512

f0fcf2f808a7080abfb1c9bd8b589244b074f341bf9e6e95acabf05a8d2678bd763c9467ed0975b4ca1ff832d6e61dc5f8323afcfd97fd878298efe4b0cc20e7
SSDEEP

12288:5wOAnwPKP5iprFt1DqNwm/+CIY0MEHdiE7HYH8zflBy8KBLWoD1SCMDRxTO0:5TkwU5YrFt1Ww8+C6B9qchKFD1S/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
634cae07506d76a3efde94d101c028f6_JaffaCakes118

Files

634cae07506d76a3efde94d101c028f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 556KB - Virtual size: 555KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 372KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ