7646f74ec1ff6298839702dbfa93f647_JaffaCakes118 | Triage

Sharing

General

Target

7646f74ec1ff6298839702dbfa93f647_JaffaCakes118
Size

375KB
MD5

7646f74ec1ff6298839702dbfa93f647
SHA1

1261024f441460f1d33b999b07b4b8f813106f76
SHA256

5e822a4dbec8290601464271a192256686dcfe424912f4a2e226e2ac298d2d78
SHA512

b501b0be3ce79db0e91f85a7eb7ec51dbe583217b181a04cce24d5ca639acdda6ae366af2c8ae70c3e4dec19559d1ed7fc5db2b99315ac8f5cc115693d8ad1c0
SSDEEP

6144:af7WE11szP72G1errs0BjQ9Z3BP3yYkW9WrBhoDPFOKuSv2LWYOBgAzL4sFGilW:m7t11szD2GQO3vyluWrLSvOWYugwLhFy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7646f74ec1ff6298839702dbfa93f647_JaffaCakes118

Files

7646f74ec1ff6298839702dbfa93f647_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ