a8e20edff22df4f003fc09c6fbc1377d_JaffaCakes118 | Triage

Sharing

General

Target

a8e20edff22df4f003fc09c6fbc1377d_JaffaCakes118
Size

2.1MB
MD5

a8e20edff22df4f003fc09c6fbc1377d
SHA1

122191da54a3ed1a7c6b9b8f14fdbffaed370fad
SHA256

c640d128384358a97852303ecfb353e1447765b5ea0c57779d71697d2ecd507d
SHA512

4559b434e8964773416d8cc9a9bd7302463271b73f1b2853df9f515fb5829c6b9846b8ec5525b8f4136177c746f06b17467f45509feef98cae565d636baebc29
SSDEEP

49152:1M5lVL8iSq/tD2S50wL3omsUi2vk/ezIYbQMgD9Xw:mnfSq/tDBaw0mriqkKIYbQMgZXw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8e20edff22df4f003fc09c6fbc1377d_JaffaCakes118

Files

a8e20edff22df4f003fc09c6fbc1377d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1.0MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ