aee489e87be43a9f4743964fd14dab9e_JaffaCakes118 | Triage

Sharing

General

Target

aee489e87be43a9f4743964fd14dab9e_JaffaCakes118
Size

188KB
MD5

aee489e87be43a9f4743964fd14dab9e
SHA1

42e05eef9536260c87dda3959c3166d51068242a
SHA256

36cc5a46a6a5432f90504000fd40f8eb3f0c9e58bb6be1010594bd2c6b4b746d
SHA512

7b0c1c53ec78b18c189ac906b6dd2fbf12867e651f285e1bb4809bb093d4fd3ec830b4b97d5396223e983c7324486b8c4e1b82c7f2de55cec8e5a5a934ed2564
SSDEEP

3072:llXYkc2d3FxF/PBEuTP0NFsQInmx+8zStMjR4gp6LMPS+8ABp367Ms7lrNPweLWg:LYk7RFxF3BEuTP0PvdA8r1ePABpxEJPH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aee489e87be43a9f4743964fd14dab9e_JaffaCakes118

Files

aee489e87be43a9f4743964fd14dab9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text11
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text12
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ