647bc4571c5d5eccbac42bde777f670a_JaffaCakes118 | Triage

Sharing

General

Target

647bc4571c5d5eccbac42bde777f670a_JaffaCakes118
Size

376KB
MD5

647bc4571c5d5eccbac42bde777f670a
SHA1

4d8a95cc64f61a85a13b8a973e3c8134da8d553c
SHA256

19ed222e7a140eb4ca8c0ba146b2626002ef042cffc51c951b7d95f6617ca773
SHA512

dbc85ded3f9bead09427aec2f5d1facb099b4caf2b80f36ac9c90dde1d16d2c642cc58913d8adde28b529dd5971d636c86dce215664aa303fc4895baf4e61539
SSDEEP

6144:jGYDGCaWTfvGU32w+daTu8bZ6asXIuPTT3bx6OFjSjZOWSnDO0oKWZpx5L/gYr:jNPXjvGUR+0cF2MWSnDO0jA5L5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
647bc4571c5d5eccbac42bde777f670a_JaffaCakes118

Files

647bc4571c5d5eccbac42bde777f670a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 668KB - Virtual size: 664KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmpCOD0
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmpCOD1
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE