89f78ef6445791d648ee70acdfffafb1_JaffaCakes118 | Triage

Sharing

General

Target

89f78ef6445791d648ee70acdfffafb1_JaffaCakes118
Size

54KB
MD5

89f78ef6445791d648ee70acdfffafb1
SHA1

972bf43e5bbd10fece57a32d833d59de19d4e83b
SHA256

acf44f5adbb430af9e7839b193168a8e3709a89c82ae9e8c564288f751ad4ab2
SHA512

307c2035ed17e4b3249e78542891d3f9c32a298be751424e467474a0b04504770291eda8f2f4dce75ef063110ed74293b1b6fa11d92d40aee8715f40ad22382d
SSDEEP

768:yQmYGNWHxgp/B8i1vYen6tS3A8cn/ahwdvTgOIfBTRhP/BKUqP0zElVgoL:y2gH8itx6t8c7s1fBlF/LYAE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89f78ef6445791d648ee70acdfffafb1_JaffaCakes118

Files

89f78ef6445791d648ee70acdfffafb1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 317B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ