765d4b1758cd95161f0c84958d6f125c_JaffaCakes118 | Triage

Sharing

General

Target

765d4b1758cd95161f0c84958d6f125c_JaffaCakes118
Size

1.9MB
MD5

765d4b1758cd95161f0c84958d6f125c
SHA1

28d3d23ae3c4c6f58a2b837e242560c61a0e19e4
SHA256

c0e42c5b86377bdf660e0f628e0e0a925178f83aedfc28d96517e5aa8a9e779b
SHA512

641f8f9354ece24d9092dbb414d76cc73f1f1dbdae31567397c73aa4b0d8d7dcfd3b296436ef34f2aecbbc639213223b50725e924485442536f7693e9d257c14
SSDEEP

24576:xdP6THx9obChPS2Rk5pIgkQGhUh2tb0E1AvlhI3157KvtkxHZ:xtM9D+5mbhUsf1ULy57KVa5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
765d4b1758cd95161f0c84958d6f125c_JaffaCakes118

Files

765d4b1758cd95161f0c84958d6f125c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 521KB - Virtual size: 521KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 998KB - Virtual size: 998KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata2
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE