a005bc50432b68bd7c19aefb9d3d5199_JaffaCakes118 | Triage

Sharing

General

Target

a005bc50432b68bd7c19aefb9d3d5199_JaffaCakes118
Size

101KB
MD5

a005bc50432b68bd7c19aefb9d3d5199
SHA1

bc1bd372bb88a5a84e57261fddf97ecff90f6cbc
SHA256

7afbd5362fc7196ff3b74acd27698089e4426ce2bf97041b145a21db8a975766
SHA512

7587ba171192c72b681b2124d291be4bb7bde8b6b258a0345f818aea3f7b8d74b20d16b457ebc92dbb54d4e2a867fefad05b93b60e2e101f4e189349b384e691
SSDEEP

3072:bQKLIfSGormc//////fvcz4+A7YJL3bxywDPB8H/8RwR:bQ+MzoCc//////fvcs+A7YVtywD58swR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a005bc50432b68bd7c19aefb9d3d5199_JaffaCakes118

Files

a005bc50432b68bd7c19aefb9d3d5199_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ