81c553c23dd7a0f035b50cf98f001885_JaffaCakes118 | Triage

Sharing

General

Target

81c553c23dd7a0f035b50cf98f001885_JaffaCakes118
Size

105KB
MD5

81c553c23dd7a0f035b50cf98f001885
SHA1

18145f23507f80d7ed7d6937a23d8debf07f7600
SHA256

e7620a4f297f4032d70afd02f4b0348e76b84b66c0a6dbc690ac43bf74993817
SHA512

4f01fd7b2cd04d8936c800e0599e6ec76761d612edd7940c273934fa62a2fdff78c20b4e3ac262a763ce2db0a5ff164853192fae3c2a00e934ba4b4d0b207bb0
SSDEEP

1536:f9YRPsSChbbjRHA5Vo1lV8ZuO4ZlZSxWosmouOXDcX0qoF9sbgvWZV8RRYj/4:fMESCQ5Vi/hO4nUxWLmotXwXmru8Tu4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81c553c23dd7a0f035b50cf98f001885_JaffaCakes118

Files

81c553c23dd7a0f035b50cf98f001885_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

qghlwdr
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

dnhnsmt
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

bpemfs
Size: - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ