a6227744c27e8302c94873c02c8f3cd1_JaffaCakes118 | Triage

Sharing

General

Target

a6227744c27e8302c94873c02c8f3cd1_JaffaCakes118
Size

9.4MB
MD5

a6227744c27e8302c94873c02c8f3cd1
SHA1

5edfff78c8d14e4219701212efff25fb09e063a2
SHA256

61767642ae504f53fe8410f1db1afe08c8cdbcc12190ec023ee98f85db1c9146
SHA512

705028154c253974af2de80694f4fde4b8ce2dbf5f48ba1c5595fee77a4e6a80cdc0d3c3c7579827c3140108f8abdd78672d8532295ed5c83b6d8e72d583a799
SSDEEP

3072:h5gNiH+CzvJv8+rzk9+RPc/Nb31iWZ48wqd8Sq:Pg4HJdFXk9+2/Nb3ATqdq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6227744c27e8302c94873c02c8f3cd1_JaffaCakes118

Files

a6227744c27e8302c94873c02c8f3cd1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 9.3MB - Virtual size: 9.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ