a1627b316aa666001cc05df06323bf4d_JaffaCakes118 | Triage

Sharing

General

Target

a1627b316aa666001cc05df06323bf4d_JaffaCakes118
Size

14KB
MD5

a1627b316aa666001cc05df06323bf4d
SHA1

20d17cbb781ad681a7f78914ee7b45b8736d7793
SHA256

22a5e0aec63e60e907c59cc8f76f1f964efa4e40944e08399c6c98cf4718c6b5
SHA512

129b37fd6a6d0e813f55d4836ee4d0ecdff04a6b43fdf6247a4ff83b9ec70a28bfc264a548e2ccdd49343cf5802bfcbd303f83f9873b98457449cc1aa69e9c5a
SSDEEP

192:n0461A/0LiwxqfKD6Vk/gqWhiQ7Sf92s5NlXC4Kita8aP+aIQjcW7g1b:Px0iwxqsRQmf92MlSsa8aP+zAz7g1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1627b316aa666001cc05df06323bf4d_JaffaCakes118

Files

a1627b316aa666001cc05df06323bf4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ