b381cc8c937ec82f09298935527da326_JaffaCakes118 | Triage

Sharing

General

Target

b381cc8c937ec82f09298935527da326_JaffaCakes118
Size

12.0MB
MD5

b381cc8c937ec82f09298935527da326
SHA1

109ff4e9db15793887e0fe3f34c8adb264fb42e0
SHA256

b1afd4e718f4f1bb401bb642a88299174cf28828b6f0b0dcb2549304c64151fa
SHA512

5ef72966284458572b60dafd8ad177514cc98d7953a00482c75c787d1fb796e3e21290cf4b731897febd2e2fb9e62fe120d8767c5d06398efd4f50023f950770
SSDEEP

98304:bvwg7YpPC+WqpkINkrClonjYfijgRQorMoxUlke:sRY+WqmMvkNgRQortxUlF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b381cc8c937ec82f09298935527da326_JaffaCakes118

Files

b381cc8c937ec82f09298935527da326_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

DATA
Size: 10.0MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 384KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ