a7e97d39fbcc6b77d3c36aef8603893e_JaffaCakes118 | Triage

Sharing

General

Target

a7e97d39fbcc6b77d3c36aef8603893e_JaffaCakes118
Size

1.8MB
MD5

a7e97d39fbcc6b77d3c36aef8603893e
SHA1

863fc28f0b0eebc7dad4e260f1a7966723adb8b7
SHA256

5a5fcc2b85bed612b461c2ba552d5f82eaf69d5709a66de85c373a3d32c5ccaf
SHA512

46e8006b86cbcb4fdccbbdff069eecbfa4aa53fcf9b900f155752c8f3f3354e35811761460cc8381f0097a259214d695270b6fbcebcf0ba13368dea1e6a5a9b9
SSDEEP

24576:ckIA7s4muqYAYmzE7n169l2ZjYpv4bYenUzwLZNyQ+8HJJ7rKWOcW7RaU0OVCjMF:cUqMF16rDv4UgZkZmJZW97QU2gz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7e97d39fbcc6b77d3c36aef8603893e_JaffaCakes118

Files

a7e97d39fbcc6b77d3c36aef8603893e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ