655806d7314df535ed2d213d4c9fcf15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

655806d7314df535ed2d213d4c9fcf15_JaffaCakes118
Size

176KB
MD5

655806d7314df535ed2d213d4c9fcf15
SHA1

91c2770ced12ffac06b759c7e79605b0a7a3510c
SHA256

4897ff0d8b815a7f9420368ee0e91a743503704dce9cd6f468d24c1dfca3a8d3
SHA512

95a7eb7c58a2cb4ddcf3becf9c7a4243356fe57f752bfe2f9d7b91eab2240abf7e66a0e2f7832cd390bc6843d12c6be57857f0d8411d2e63d4abfd8442f72c70
SSDEEP

3072:fXEDDrgqDYVaxs8/txPrEz4nPQKtlbPf8BuZqDJnPeuvf9DrSG5nsVmkdxCHIPIO:/EfUDV58/fPJzHbcBiaBeuX99hlkwrst

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
655806d7314df535ed2d213d4c9fcf15_JaffaCakes118

Files

655806d7314df535ed2d213d4c9fcf15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ