af05bff1571898c715f817304543e221_JaffaCakes118 | Triage

Sharing

General

Target

af05bff1571898c715f817304543e221_JaffaCakes118
Size

155KB
MD5

af05bff1571898c715f817304543e221
SHA1

19b71aacc3f90a1c7011c7219d142bc675d18809
SHA256

de6d9d886d8eae5459eef78b69506e9753922405a0ccf461c3592f3498aa1def
SHA512

e1f0b9552cb069294267170f465ce29e8dbbc61ce014b734db3faacdc5d4fec67ef8b42ddfca1abbca19e9bc27b13ac08e153434d954702eb30b122a450f3a33
SSDEEP

3072:VeZZhQYiZQyAAgHfKv1RnYA18G3yVrPpwPV6:VYZhNuQ/K/nYZPp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af05bff1571898c715f817304543e221_JaffaCakes118

Files

af05bff1571898c715f817304543e221_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ