b154845a5594e0b4545982805fed30a5_JaffaCakes118 | Triage

Sharing

General

Target

b154845a5594e0b4545982805fed30a5_JaffaCakes118
Size

166KB
MD5

b154845a5594e0b4545982805fed30a5
SHA1

e4a72675cd143b1c074796c6e41086bb4471de31
SHA256

1520c1bc7167fc43d0ebe8b60e89f8738b17cfa3c714c3729925824a05bac291
SHA512

77b0892f3facfd42837d691b3530f15fbad0ca4fa5ab9b537bd8c8a59cb8503f9359cc7fdf45dfafde399b3445fba4681fdbfa424b5ae1d6e727f55351b1784d
SSDEEP

3072:FbDHgjfIZ0XIBc5Ud2U6wrtF2KlajVoZBXKzPMFt+Wexm:F4jQZ0odQiKK6oZBXAEFkL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b154845a5594e0b4545982805fed30a5_JaffaCakes118

Files

b154845a5594e0b4545982805fed30a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 1KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 158KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

fdesf
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ