ab41c152a560ee87947edadc48bb9b8b_JaffaCakes118 | Triage

Sharing

General

Target

ab41c152a560ee87947edadc48bb9b8b_JaffaCakes118
Size

1.2MB
MD5

ab41c152a560ee87947edadc48bb9b8b
SHA1

344edb2fc7bf3a8b7e2516dd4125b0b90903e18c
SHA256

5743e2210e2fcf18084afbe5bc7e826240d310550a4e226f8e52f82243c28580
SHA512

a3071e02b7f06fe4565af5cfac3f355c0c56c758a7d391e5e7f469ae59637ff30b3e5f04b04ded65460a46945499c2c335d76151d5dc7e5cf9df297b5126ea0d
SSDEEP

24576:I/1h48u/vjByCaNINSGxN1WnX3N+C5YikR870Mb6:Iffu/1gUSGxN1WnX915NkRO0A6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab41c152a560ee87947edadc48bb9b8b_JaffaCakes118

Files

ab41c152a560ee87947edadc48bb9b8b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ