aa955ccab947f9fc987528f2840b0c37_JaffaCakes118 | Triage

Sharing

General

Target

aa955ccab947f9fc987528f2840b0c37_JaffaCakes118
Size

254KB
MD5

aa955ccab947f9fc987528f2840b0c37
SHA1

446b972222fdcc53453e8e8315c6f7d866e1c6aa
SHA256

151e7a663fc076cc65103dee10bf10c7c904f2b9bb71f449b2a10143fcba3f19
SHA512

c54d9e5ab06073633eb0cb9fd67fcb0ab7979a6b67c7343f3dd6483eba4f88585810624f99a116d5464d015b9ea76d840e5d92a6bd62fb720ed5f1c7368614cc
SSDEEP

3072:eleQjpgqK0I4rV3Yxi9DiIeolE+4na0SP4nqUJ:enxVI4RoxieH+ya0LJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa955ccab947f9fc987528f2840b0c37_JaffaCakes118

Files

aa955ccab947f9fc987528f2840b0c37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

?PatchCallBack@@YGPAXIPAX@Z

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

stxt774
Size: 4KB - Virtual size: 443B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

stxt371
Size: 142KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE