4169f0ada3f069e2fa0dbf561820d4b0_JaffaCakes118 | Triage

Sharing

General

Target

4169f0ada3f069e2fa0dbf561820d4b0_JaffaCakes118
Size

851KB
MD5

4169f0ada3f069e2fa0dbf561820d4b0
SHA1

eb8e2217c6b667102c31d47bacb88a95e25f4a9b
SHA256

63d643f5f17f5e621ef22e4c05a5d92c519376d0043c0958284d34ae206c0161
SHA512

df70c99c4874ef4cbb8c1a251b69e087a1ccb486ba1c1c2a5035599a55da64b3662f722bb01901aecf204bbcfc2502d4c3306a1f83c695249305aa60d1432daf
SSDEEP

12288:y38ZC2jTIBwgM9poZThtKyx12lwLxog3rChBQhwIRP17YppIkNVnfnwhEgtY9:IfzBw3PotKWR9h3On6t10ppRNQt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4169f0ada3f069e2fa0dbf561820d4b0_JaffaCakes118

Files

4169f0ada3f069e2fa0dbf561820d4b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 490KB - Virtual size: 489KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ