89e1ef00c09ba1930281f7a78e3bca57_JaffaCakes118 | Triage

Sharing

General

Target

89e1ef00c09ba1930281f7a78e3bca57_JaffaCakes118
Size

342KB
MD5

89e1ef00c09ba1930281f7a78e3bca57
SHA1

077cc45e95bc8768bc3ee8df4261388a751397db
SHA256

83117d960ae570ca46af20ddc377a1f1af8cdf75f1b1a4ef9c0a045592548352
SHA512

77a6afecd2b3e10f166dff813829b096a0af4d1cf5666d447769e21159c971a9758ada3f518194ade3151fde7d85fb714fcda00c80e041af358b218e4fef3ad8
SSDEEP

6144:2RzFPrmbnQ8Vn74Nu49NZ4fjHyX7UVTfgAjGxOxTNloGGsp:UzFyb3VnE5GfidAwOV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89e1ef00c09ba1930281f7a78e3bca57_JaffaCakes118

Files

89e1ef00c09ba1930281f7a78e3bca57_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ