ad778163998a4761e14f09ef8aa1973b_JaffaCakes118 | Triage

Sharing

General

Target

ad778163998a4761e14f09ef8aa1973b_JaffaCakes118
Size

144KB
MD5

ad778163998a4761e14f09ef8aa1973b
SHA1

12904c30bc1303f970b382186449796c684c942f
SHA256

863140a6b9b350480cb1c6af808f7c06b95097608f6ca716e0db1dc58fe038b1
SHA512

d51cc98455c6af3fc6c2454ad9f3878d03ffb067c11f7e7046caea8e0b152a36e2d191b464a2bd551c052a563ef3724d344689316df6564746fd9100f66198cc
SSDEEP

3072:unFmFvpmikXvcoQFxeUNnkSz7bc5uf7h33js5p9t9buMmU3OZ1:4mFvrOvTQeULxtmjaMd3U1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad778163998a4761e14f09ef8aa1973b_JaffaCakes118

Files

ad778163998a4761e14f09ef8aa1973b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ