a0f418974899e683062ec7ca4706df08_JaffaCakes118 | Triage

Sharing

General

Target

a0f418974899e683062ec7ca4706df08_JaffaCakes118
Size

396KB
MD5

a0f418974899e683062ec7ca4706df08
SHA1

cfa40f2755e95f317cd173eccf43ff2f5b9631fd
SHA256

41727edb959a35ad45e4cabb7b97e2973b0dc929ae22023f9e69472ec4477aa7
SHA512

d010e27ddb95110eaefd10ea4ce4a8e7018be5b8f32b1be50d1823378840e4fddba6397896a6559dc21c4b49d8bf981c1364ba02f8af6007f242ad54224b2943
SSDEEP

6144:8kqHdq19KTOYc2x/WP81OfUKxBYNWDC7KLWmwExiOSml:7qHdq19KreE1OGW270WoVF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0f418974899e683062ec7ca4706df08_JaffaCakes118

Files

a0f418974899e683062ec7ca4706df08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ