86a9d3a1b5a137a66b3fa32d12887573_JaffaCakes118 | Triage

Sharing

General

Target

86a9d3a1b5a137a66b3fa32d12887573_JaffaCakes118
Size

395KB
MD5

86a9d3a1b5a137a66b3fa32d12887573
SHA1

4cfc33f63a6afed4bc33b84e199c23c4df9b6f51
SHA256

174e987f9311875401f6c5f46f74846e54084e627b59e4783f0e2d5544560aeb
SHA512

cc9ae02d0aefda9b9a5cead6268dbfe2aaec22d985e675609dd3db9bd812503f5c1e65e7d7ff5da4ac088d42a2e5e7004ce9ec5945a1d2566c2a542c504ae936
SSDEEP

3072:zD+uYYd8Oho+cpybPwSMobqUHkDbjFJHh9YDYiGZTFPqmHfR3HU8i/VyP/319IE:z6qGPBp5obZk5JvweZTlqmFHU8IAPd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86a9d3a1b5a137a66b3fa32d12887573_JaffaCakes118

Files

86a9d3a1b5a137a66b3fa32d12887573_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 149KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

bmegr
Size: 11KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE