95a6390a47cf04245ca76575eada501b_JaffaCakes118 | Triage

Sharing

General

Target

95a6390a47cf04245ca76575eada501b_JaffaCakes118
Size

1.7MB
MD5

95a6390a47cf04245ca76575eada501b
SHA1

6f7684c1f7dd219dd93702cb0a18b16cfc44247c
SHA256

e63b1859072aa89660d7b34ccb20f3a92fd33869f913878582fc5e47806f3cc1
SHA512

38b1c0ed995bf838319dda9eca0008aa3e268052e8776c593bdbb27689c205dd5cc9a262b94b97b740519363c4dd0d717a83fa36db279adcf38f652002fc7f41
SSDEEP

24576:dMJzMCzS5w4bVPHgU7xUuAWRWnD74hskDyZV/33nrmL0aCkfiUqaapfdXT9vOWFD:dKz8p2yuuAWRWO4V/37S0az1apFTRtD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95a6390a47cf04245ca76575eada501b_JaffaCakes118

Files

95a6390a47cf04245ca76575eada501b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 422KB - Virtual size: 421KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 386KB - Virtual size: 386KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ