a444dc3f9159a55c09fab872cb04d4b0_JaffaCakes118 | Triage

Sharing

General

Target

a444dc3f9159a55c09fab872cb04d4b0_JaffaCakes118
Size

607KB
MD5

a444dc3f9159a55c09fab872cb04d4b0
SHA1

dcbbab33e652d373632e8b1a258ed4ac24798689
SHA256

2dddced6063ec5afb68bd37e43d5b25e0ed052b8303e934bb7c6b22988641a55
SHA512

8f81635650e32ec881ce34676943956a9c591bfe1ec890da605aa7ff582903a1f9b0f5e8f16ec4c93f2a3db2c2512c7bb528b8544d58711cba11f64b5ff036a5
SSDEEP

12288:lyz+8Twdtr67EWFD0WZI7PNakRIYP9foGSnmkkkkkkkkkkkkkkkAX:lM+K7Bgpr59L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a444dc3f9159a55c09fab872cb04d4b0_JaffaCakes118

Files

a444dc3f9159a55c09fab872cb04d4b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 435KB - Virtual size: 435KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ