75d499d14405b3b24e0835f7f69f0a13_JaffaCakes118 | Triage

Sharing

General

Target

75d499d14405b3b24e0835f7f69f0a13_JaffaCakes118
Size

194KB
MD5

75d499d14405b3b24e0835f7f69f0a13
SHA1

3e34d02cab941d64d4cb52b0087fece44f5a1c30
SHA256

8a5e1fd9fe33c5245e3c910a00efa625d5650e6d908265e46925b90c75f4c48d
SHA512

52b7e550fdba37c86a8357d30c0812acd559506b87bddd3785e910eac4d3c75a625213f9c35fc616d74bce2cd23366d8337b0af2b56a135825e99b30a3b7c3ec
SSDEEP

3072:giyX+3o7y7wz76Ut+pt9MhEeoaqqXwLUdeVy7Lwa+m6FukAKnNZMeYKAF:giyObe76UtEiXqqg4l7L3+peoN9AF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75d499d14405b3b24e0835f7f69f0a13_JaffaCakes118

Files

75d499d14405b3b24e0835f7f69f0a13_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ