7204a48390cfd40bef480a8548a92262_JaffaCakes118 | Triage

Sharing

General

Target

7204a48390cfd40bef480a8548a92262_JaffaCakes118
Size

127KB
MD5

7204a48390cfd40bef480a8548a92262
SHA1

659c1e5f876e53d900d5ceb02c32b67c0241cd86
SHA256

4c7bb9791e149a9d5e588837bf1dbe1c351d7c03951d8131565e00356808c818
SHA512

1f161d38a2b286ab7c8289de6751117f29b13535834272d8c91ea914e40e8db35d657e6fd9ca07ceda38e31d9200aa5dfdbabcf245f87b9c170087c51eefa187
SSDEEP

3072:f9IzxpJKu4s0ldbzBsVxmjWDihjfZTLcVOEVs3Kkj8aC:f9yxRKLbtgxOIiFEm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7204a48390cfd40bef480a8548a92262_JaffaCakes118

Files

7204a48390cfd40bef480a8548a92262_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ