67b66345e853c264273b8ad552c60168_JaffaCakes118 | Triage

Sharing

General

Target

67b66345e853c264273b8ad552c60168_JaffaCakes118
Size

642KB
MD5

67b66345e853c264273b8ad552c60168
SHA1

659ce8b92669884e7d457fc87bce6f176280031a
SHA256

2da7c2b6fab3396d606452c6f7adc55b4027c5ad60d3ba7a60e9e571e42cb564
SHA512

af280efa83768109c67dc1bdc997a37a88f9ca3802777e68b06e606442f65c942a1c7748c6edbb58ca24914ab20a4f36c55f23e6ed22828bc7f0cbe9afa7421e
SSDEEP

12288:rJ1XreEcnjWPOt9qghzOk5UVVrDAq/XCVGcYml9pMmIyplAr/27:rJ5YzahLCvYI9pMmIHr/k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67b66345e853c264273b8ad552c60168_JaffaCakes118

Files

67b66345e853c264273b8ad552c60168_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.code
Size: 918B - Virtual size: 2.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.entry
Size: - Virtual size: 3.0MB

.loader
Size: - Virtual size: 432KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 632KB - Virtual size: 636KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE