861e1e847ab0e1b3bf55ec971bc8a614_JaffaCakes118 | Triage

Sharing

General

Target

861e1e847ab0e1b3bf55ec971bc8a614_JaffaCakes118
Size

171KB
MD5

861e1e847ab0e1b3bf55ec971bc8a614
SHA1

8cec08ed8f2b4859204e7ba1dbf73bc781c6dc14
SHA256

5181bbcacab5985f6d4f0498665eaf2275f76528c17c556071a32b401be38a3c
SHA512

1bab743c4f9baa0a3115ea3fff25a6cff12294a3b95a13fafc0b08cab9aa386268919844af20c560cf15740128f9df386938720b26c7bea78abd70180db9496d
SSDEEP

3072:K2z3P9mxzzvsSamFIsY/clZsXO7YOo0f3F6ICHCPiiPOLrwkUVv0PDXRAttkVcWI:5luwSnF1ldG1H6OlEsP0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
861e1e847ab0e1b3bf55ec971bc8a614_JaffaCakes118

Files

861e1e847ab0e1b3bf55ec971bc8a614_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ