647a95bc0d626d262da21eff2189e05f_JaffaCakes118 | Triage

Sharing

General

Target

647a95bc0d626d262da21eff2189e05f_JaffaCakes118
Size

996KB
MD5

647a95bc0d626d262da21eff2189e05f
SHA1

dd9f965621e10288a48cb30d1669f7b557384f02
SHA256

cb15c66aaf12bbc848480c0ee04d708b811bf2459e4e9c2d69a77bda075e30f3
SHA512

08734917e3ba00ff629df809bdaad668c4fa1f037f51a54a5fb0ceb5b36b8149256530794b09c73ac0374f752dd2ab178e2965120e89902f14900e3f30c78874
SSDEEP

12288:ffgqCO/4Xp/GZBBME/Kmmny0bJ8TkLwqb1ujOEcXguWM7wSgCDbsZY7uICby:f39ZBBMeG3cw1uKtX9f7wSzsZXby

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
647a95bc0d626d262da21eff2189e05f_JaffaCakes118

Files

647a95bc0d626d262da21eff2189e05f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 787KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ