689c8fd3903f2b0281e93a0853599f61_JaffaCakes118 | Triage

Sharing

General

Target

689c8fd3903f2b0281e93a0853599f61_JaffaCakes118
Size

488KB
MD5

689c8fd3903f2b0281e93a0853599f61
SHA1

38224c577e570604f8119b571ab3de1832694de9
SHA256

2d4a0418d00c9d3180d982d1cc32a4390f75cc13d1422f1fc6f306c9f1d52d37
SHA512

86aec0348b69c31a277cf79a2ebca86d5c3708635ae5e348b50e72dbc892dfab9755e74a3add404922db8b37e218c8375807e1d58a5bc4450368490ae145e73b
SSDEEP

6144:scg0hBvbmcG0hdhWQB3VA5VrOMMb4lWf4BsUH2GSOA/eJevzqtWm6EyPQgrlpB7y:DBvbmcG0BWUKLMbgsA2GSjLdm6ESQgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
689c8fd3903f2b0281e93a0853599f61_JaffaCakes118

Files

689c8fd3903f2b0281e93a0853599f61_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 406KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ