a508adb1ed7221de8b7a936e169ceea7_JaffaCakes118 | Triage

Sharing

General

Target

a508adb1ed7221de8b7a936e169ceea7_JaffaCakes118
Size

605KB
MD5

a508adb1ed7221de8b7a936e169ceea7
SHA1

87b4501351a7a56bb76d023bdcf681b0d3f08852
SHA256

84f26ffa3821a485e4348c1d78f633c8ea2410563590665054e83f876ec7d5f2
SHA512

b845aeb01dcb6ff17889ed48ad0530e5f647cf602af050b47952212685a895feca3e16c5e2bd7ae215666fc684662eb98f0dcd1c639a150f2023f2fba08ce343
SSDEEP

12288:g7gefpyFMQ9ASfmKehEgz4Mh7jrf+F77y5foytIAAh9G9:gEWpWMiTmKehEgzxsF77y5foyiq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a508adb1ed7221de8b7a936e169ceea7_JaffaCakes118

Files

a508adb1ed7221de8b7a936e169ceea7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 344KB - Virtual size: 341KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 844KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xur
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE