944fb03db82ebe59dcbc0b38a153df35_JaffaCakes118 | Triage

Sharing

General

Target

944fb03db82ebe59dcbc0b38a153df35_JaffaCakes118
Size

554KB
MD5

944fb03db82ebe59dcbc0b38a153df35
SHA1

971f4b2ae4f938d4ed243e035b39f3bb7c2db155
SHA256

f269fdceebbb0be390e8279dbc586669b77f0ef49030aac06c6b91d951948e25
SHA512

df5079c63b0961fc8c4d0f9acfa85524dcaaa868511738e4ed2ed7d217f0bf98aa9ade05624fbfefa4ac5e11c95d948672a0929b96ddca6869a9b8ccaddb7d9a
SSDEEP

6144:n8FwyWq5Crt5uzQ7oqJC+WkZyvIVjdoaKWU3WIm/7wTB4qxTCYO7QkhLcIh3OFZu:AWxrt5SaXQXNWIfB1khu+l+BYzzr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
944fb03db82ebe59dcbc0b38a153df35_JaffaCakes118

Files

944fb03db82ebe59dcbc0b38a153df35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 368KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ