81d5e7a51d597cf4689e27d1c8048154_JaffaCakes118 | Triage

Sharing

General

Target

81d5e7a51d597cf4689e27d1c8048154_JaffaCakes118
Size

552KB
MD5

81d5e7a51d597cf4689e27d1c8048154
SHA1

5fba374766cad3bece930f80b2e485f279dd2d74
SHA256

212466da533bcba7b5d9ce3c4a9e0a35f1b1d96aa84e6fa9b3537063a4f25453
SHA512

07b3dea11db834b4920a1886909c178a5146af7aeeb99447b3a1353c0d44e51269b8ea7bfc08330c3a783c93f1fc141169a4b0455a46777b89b3e7e9e11febb7
SSDEEP

12288:5fH2pohMieQkyrKD7yyTwhVbVO3ZnGTHx6:FWWNvkya750oJGT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81d5e7a51d597cf4689e27d1c8048154_JaffaCakes118

Files

81d5e7a51d597cf4689e27d1c8048154_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 462KB - Virtual size: 462KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ