85811eae72893c1c1232f09ab9a59fbd_JaffaCakes118 | Triage

Sharing

General

Target

85811eae72893c1c1232f09ab9a59fbd_JaffaCakes118
Size

33KB
MD5

85811eae72893c1c1232f09ab9a59fbd
SHA1

2670150027b7679c9f1076c64d146d0cfb6ab0b3
SHA256

876c15c9f600f0b1f041db423d3c25394b1b15a18667891b0dcb81c29fea1e08
SHA512

8902c91ff49b101d9e4fc17d8cb578e7eeb956eb7dae4f88a5b01495e0d21b4c1e44dd23f11069f3c85d699a74aa12cd4fbe680d7aa52e06ace55587508cbac3
SSDEEP

768:3oiGqlOsFsz02LvaAWBybStcfHAt66BMqWNU+KdRpWbSDHCHFAHcPR:3vGqldFspiPtc/a1BMqqU+aS2AR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85811eae72893c1c1232f09ab9a59fbd_JaffaCakes118

Files

85811eae72893c1c1232f09ab9a59fbd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

"idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

"rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ