a51e94147408bcd88e7c7d3eed35e962_JaffaCakes118 | Triage

Sharing

General

Target

a51e94147408bcd88e7c7d3eed35e962_JaffaCakes118
Size

400KB
MD5

a51e94147408bcd88e7c7d3eed35e962
SHA1

2ed28e9c970405e74cecced3e9827b6e849d12e6
SHA256

16a1af268ccabf60c627695ed129cc39c4ef77d88c0b8e0827fb829cc1fb962d
SHA512

c747026cfb07d8409d3f19e96fe4cfe5fa862e685e8498e36379f22ac5a0c5197741d78d138cec4cdb3a9f11f5742650506308f83d5f547bbab7601bf0bdc1d1
SSDEEP

6144:IxO+kd3PYQ9M7A2t/H9HYbv69VQi1qnnFrBFRZ8waPwIR2QVp5qCV++czzyBI5en:UW3PYQPC/HeXFrD5aPw0Pq0+byP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a51e94147408bcd88e7c7d3eed35e962_JaffaCakes118

Files

a51e94147408bcd88e7c7d3eed35e962_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 346KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ