89f612e1a71574eb7670bb65a11f150a_JaffaCakes118 | Triage

Sharing

General

Target

89f612e1a71574eb7670bb65a11f150a_JaffaCakes118
Size

128KB
MD5

89f612e1a71574eb7670bb65a11f150a
SHA1

e1f637ccc9166b8913b21afe795ba3782bd69141
SHA256

2c402449d8208be9c7547e67ca5ed1c7bbacba1f8cea00b727cf0e47e8beeb6d
SHA512

be4c5b49274b76743e2eda76c0d576a4e89b1f9a350f7e00b567337f223b67eaf4cf886899f9c18b1ff8c5bb3cc4164b23318d0414a84808707d9a5ff9edb68b
SSDEEP

3072:gGsu/6yr9fz8T67+RZGwThMo1Crzxrx5H:gGv/6yRfzY6IVT9qzBx5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89f612e1a71574eb7670bb65a11f150a_JaffaCakes118

Files

89f612e1a71574eb7670bb65a11f150a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 110KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ