75c59b9ca41303ca29f08ebbf47996f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75c59b9ca41303ca29f08ebbf47996f1_JaffaCakes118
Size

844KB
MD5

75c59b9ca41303ca29f08ebbf47996f1
SHA1

ed0b0942f99a0beda7516d9c8e39edd0e8355f1f
SHA256

d5f15c0914adc2c84290507d7c45b8a4f2ecdd175c82597c15b5c963b0a872f5
SHA512

d1f680b9bf68c1dfe07a0e721dd0ad442b725cf2cc032ecacc44d01bc51622a68e8ce8d7d9920408e70c94241ae3728f5d3e8ca48821eb579921ddfab148b0a5
SSDEEP

24576:gpniWF5MF/qpW8T1EA5inp+epBOsa3kY2+mO8K:eiq5MwpvTbgpdO13O+mO5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75c59b9ca41303ca29f08ebbf47996f1_JaffaCakes118

Files

75c59b9ca41303ca29f08ebbf47996f1_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ