64c80aa4f4f18f1e5822280f3ccb9ff8_JaffaCakes118 | Triage

Sharing

General

Target

64c80aa4f4f18f1e5822280f3ccb9ff8_JaffaCakes118
Size

97KB
MD5

64c80aa4f4f18f1e5822280f3ccb9ff8
SHA1

1d3e9872d9d1dd72b6deabb005702f5ecd11ddb2
SHA256

3ec472353f3539a27e63693c19941a57d80a5424776b39826559f00e4a0b5b88
SHA512

206772984635b18d7276607e7c29d8000640fb888a7865f67f85c7d369151ed37b1db847c0e1513dadac1ebc8699556963ed770281f96a6adb23ace83ff4b051
SSDEEP

1536:orCQ/HhtvWnI5x4P0EZRaXFIIyG2tOAXTawSPqAhFRkKqWKNbbzV:orCQ/HhtvWLP0EqJyP25qIFOKqnbV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64c80aa4f4f18f1e5822280f3ccb9ff8_JaffaCakes118

Files

64c80aa4f4f18f1e5822280f3ccb9ff8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

micr_oso
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ