a4aac6c19aaf489a1292b85323ed2a5d_JaffaCakes118 | Triage

Sharing

General

Target

a4aac6c19aaf489a1292b85323ed2a5d_JaffaCakes118
Size

487KB
MD5

a4aac6c19aaf489a1292b85323ed2a5d
SHA1

acdc8881df02bcbf6e5f1ffe070f905101ec101d
SHA256

52074ffa2beddc543065364dc0b59dc60194d2e636df9dbfb0394b7cf514e7e8
SHA512

3333c4f0484b93a800c811154fd9d941440488da9a2e58d33a5a9b318f5ca596efd5f8ce2c1e02960f68b363dc3e6311fd94bb0b00f39c68a127de21a37e5e33
SSDEEP

6144:Z/66ZmCUexQqTjoOYSl8zTE7W+SYd7M8OmLAyTbxJm4/Icmg2m7MSd9bGx0wxHNa:Z/A0TE7IMsStm7QRe5K0wxqwe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4aac6c19aaf489a1292b85323ed2a5d_JaffaCakes118

Files

a4aac6c19aaf489a1292b85323ed2a5d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ