b605fafac239e826ed83543004bc7212_JaffaCakes118 | Triage

Sharing

General

Target

b605fafac239e826ed83543004bc7212_JaffaCakes118
Size

1.3MB
MD5

b605fafac239e826ed83543004bc7212
SHA1

67cc536817976102c97efd90339057ff473d8246
SHA256

4da15ee7be0335ae64c6df734897f5f3174d42c6b51e130f5bb5479856e4dc7f
SHA512

d678b63d799fc8921fcdf31968b42f852cfdde3140a19993c453b633c62cffa3dc7e039e9635514a4c7b05ca13b889955fb372fe805c30725cbe2fde007c2500
SSDEEP

24576:YdHa/LxJSiPbI0muvGZufUDAQOfyDNvY/9LZEBcLYegxYP4MM1A:22xJSiPbI0mHZ/CKu9F8Y3M2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b605fafac239e826ed83543004bc7212_JaffaCakes118

Files

b605fafac239e826ed83543004bc7212_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 10KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

XPROT
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE