b489782ba820022988e4b994b4b34837_JaffaCakes118 | Triage

Sharing

General

Target

b489782ba820022988e4b994b4b34837_JaffaCakes118
Size

790KB
MD5

b489782ba820022988e4b994b4b34837
SHA1

a1de7fb806d2c1f3253324a6d7a95c31589ae0f1
SHA256

4432e8f7ce05fc41f004b9332f6c9337ff16d703896e531516537ae473350371
SHA512

340f144652b59947c5cbd3ce10c8198a947949c18d3cffcf3472335b686e69701cb76ed2188302a5c6e3b17c18e8eda52d33e2ad9d2467e189979a0b51c58498
SSDEEP

12288:FYd+DN2QzXqUgYVhLLNO931vK1ifzNv9VQlqjiqGfwmJ+o6o+pLm6db/fUWQO:iIEQzXXLLq3RMEvV4+ov+Ldt3LL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b489782ba820022988e4b994b4b34837_JaffaCakes118

Files

b489782ba820022988e4b994b4b34837_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE