971c785f9b588d18bcf4a6938f661bf2_JaffaCakes118 | Triage

Sharing

General

Target

971c785f9b588d18bcf4a6938f661bf2_JaffaCakes118
Size

858KB
MD5

971c785f9b588d18bcf4a6938f661bf2
SHA1

7546a81cb28cb5588325331605e5013253cdf6a2
SHA256

878eab0f512e0c474c05ddb99afcb6019ccd9d60a3c510fd2d05521ec06a4498
SHA512

c8453cfbed484e555b78ee28244798d48b935913d76aecdf00f680b191cf76dff9b33618c4c0cd3d1d8c1144692da3ff0e65f13ab6bfd32d7950693256e045b3
SSDEEP

24576:YhFUNyyCyyyqSjgO0r0cY2KKyJyq2NYCB2ahS:jNyyCyyypsrPY2KKdqYYOS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
971c785f9b588d18bcf4a6938f661bf2_JaffaCakes118

Files

971c785f9b588d18bcf4a6938f661bf2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ