89a119e3f53b16791c1fa49ef04f47b7_JaffaCakes118 | Triage

Sharing

General

Target

89a119e3f53b16791c1fa49ef04f47b7_JaffaCakes118
Size

378KB
MD5

89a119e3f53b16791c1fa49ef04f47b7
SHA1

8e5b9fdcf41b14e88fcebe607f2ffc8f28720640
SHA256

d58e82b05563543fed7946decd89c14ffe932c09fcd43f74899b2aec3e80f0b2
SHA512

6b6782efab2fe0885ed4c78e09e188b19d05db2b041d8e45fcbdca605fc8b94a1ce877096558f219dd8f14b93516a20bb8437353afc41b2eee4c280dc22f4f66
SSDEEP

6144:w9zDk1BYhjm9bmGlLTRxG7KOPg7l61XL25zAFH/4ObckDpEiQReuxYON8skdtq5y:QIAFHCT3t9gOZepWPjAYEfd3AhzM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89a119e3f53b16791c1fa49ef04f47b7_JaffaCakes118

Files

89a119e3f53b16791c1fa49ef04f47b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 319KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ