828d91c3dd59ecbed2e0ddb5a720ae63_JaffaCakes118 | Triage

Sharing

General

Target

828d91c3dd59ecbed2e0ddb5a720ae63_JaffaCakes118
Size

876KB
MD5

828d91c3dd59ecbed2e0ddb5a720ae63
SHA1

622b48fa60b15d589f3c82ba53ecf598765e3060
SHA256

17582d96fe3f5c43a941b875a95c4af8f8173f05ed9bef56f6e75d9246ab556a
SHA512

6751e09accef7a76c9fe936fa20c16e84c4638f7e8fdfa7c7f308e53b329cecff70dd100a812235d6d0d7f48f5462b4585acde50430f5ecb64f9c1e921ef48af
SSDEEP

12288:4XKezvP7x8cwFZCG1Pt3nmxHYXJoqiVRnFzDog/zNW:4amxtAdL3KHYPiVdpJLNW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
828d91c3dd59ecbed2e0ddb5a720ae63_JaffaCakes118

Files

828d91c3dd59ecbed2e0ddb5a720ae63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ