7470aece3285492b553d20501d158278_JaffaCakes118 | Triage

Sharing

General

Target

7470aece3285492b553d20501d158278_JaffaCakes118
Size

500KB
MD5

7470aece3285492b553d20501d158278
SHA1

0b8f3b4850074047e4bb1b02b697594cb38cef1c
SHA256

909d0e5b0808c9676c779620a16aca46ebabfb315682473d3f54df233d827742
SHA512

0c98f8f99d3e6e4f13dc7ac78332432beb8b3c636ccbc3937711de7c0a511c2cac3ad280e844aee4e0947594867e8300b91056a31c25286fbe44485212b8a3d7
SSDEEP

12288:gDWZGw8dOPqD1gZY2fhXgNo6D+XlMQBbLdRLpEJ4Z1GcWW:g6ZGwQbDCeHoCAtBRLpE+jGcL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7470aece3285492b553d20501d158278_JaffaCakes118

Files

7470aece3285492b553d20501d158278_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xur
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

..
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE