ae816387f35b06f1a17e93d973090990_JaffaCakes118 | Triage

Sharing

General

Target

ae816387f35b06f1a17e93d973090990_JaffaCakes118
Size

209KB
MD5

ae816387f35b06f1a17e93d973090990
SHA1

7ba3bed558fdabebf4e506abf54075a77eac4ac0
SHA256

5acd3d47529fed207a721ae5ea1b39481deed453c7c7a442959718abef5f1702
SHA512

c2e8136698fea7273ed5ecd38a8f4a737b9497b20612676580adf8ba16fc1aefea9abf1efcb4d24899e0a141818e7b48b2a3ce8e2261a19194e52ba56c466591
SSDEEP

3072:XmbG1//ri+gPaoW2jf3l807K41ZEfIlUc1AdXu0khuZludos40:WbGdi+KaT2D7jYfIGihKh0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae816387f35b06f1a17e93d973090990_JaffaCakes118

Files

ae816387f35b06f1a17e93d973090990_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ