a219ccf5169314e1815953a4a8e13644_JaffaCakes118 | Triage

Sharing

General

Target

a219ccf5169314e1815953a4a8e13644_JaffaCakes118
Size

222KB
MD5

a219ccf5169314e1815953a4a8e13644
SHA1

7396bd213859f482e1e389e295fe02bdf65e52af
SHA256

d92d8d25667ec0ff5e7cc1bd71a61011a6656d8007506dbd79ce3053bd6dcdac
SHA512

2c68825369b51c2bfedf2da1f882fa2b4236cd33f9426d9182bb4d9ece55bcb478b4f94b908450004f24748a76dd48ea5d03f1fb6e9ab964cb0ea67595b3176d
SSDEEP

6144:UH+zNHicbIqnfyAHqLnuSIoayYAnolc0hd6Z5pi7:VNHpbIqnMPnijd6x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a219ccf5169314e1815953a4a8e13644_JaffaCakes118

Files

a219ccf5169314e1815953a4a8e13644_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 199KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ