a0df7a86dacf170617285771687aa982_JaffaCakes118 | Triage

Sharing

General

Target

a0df7a86dacf170617285771687aa982_JaffaCakes118
Size

1.1MB
MD5

a0df7a86dacf170617285771687aa982
SHA1

b6069e537677fcf4e04e345b033f056029de4e19
SHA256

61d17317837b9e7041394787e1980e23176ab8b9c27746372cc78021dda2aeb4
SHA512

478f49f81894a26cb2db2a022f2d5da9a47b7b59d2749d584f519524fa412552ac7bb457d3a16d79290e5f9e3016695d932d7c863bccbe0c14b6a57c52fb47a8
SSDEEP

24576:7EFM/pQ9nnjOie2YEGvtb7LjRVEazpQSBXfMcMK/UqNsx2HESk2jEjzssDkZce:7EcCSXvMzEHkIZce

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0df7a86dacf170617285771687aa982_JaffaCakes118

Files

a0df7a86dacf170617285771687aa982_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 456KB - Virtual size: 456KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ