89a9ab744efb766ab891e0facd9cd6bd_JaffaCakes118 | Triage

Sharing

General

Target

89a9ab744efb766ab891e0facd9cd6bd_JaffaCakes118
Size

157KB
MD5

89a9ab744efb766ab891e0facd9cd6bd
SHA1

4931500497d775d75ba934eeb22840159a08a726
SHA256

41138b0799f40761698acfdb2b23a18e9ca25f3b1634867fb279c2d2858954c1
SHA512

ce3ffd29890cdca47068256f8570bb7b67b4dc54529524c2f039a230f31071cb58d09f38bba5379be4df71a980faaf4cdcf73dcf4166c711568d92e55fbac217
SSDEEP

3072:zpmfzhjMEwwyFdO36+fQ11V9BOIql+i3s:zpm7hwHLzEfUKs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89a9ab744efb766ab891e0facd9cd6bd_JaffaCakes118

Files

89a9ab744efb766ab891e0facd9cd6bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 188KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 52KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 36KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 208KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE