b629362e391933bc9329b0ad8a20f7c3_JaffaCakes118 | Triage

Sharing

General

Target

b629362e391933bc9329b0ad8a20f7c3_JaffaCakes118
Size

667KB
MD5

b629362e391933bc9329b0ad8a20f7c3
SHA1

e24d2d39f56bd984c3ff6d9950aee64a95a0ea24
SHA256

8c6064b3447874bc0a4bc7e9ba2eca70bde35f9008e82b34259e93e7ad951f23
SHA512

f96cfce4e3695554e0dfbd4746299c97fc1e936eccadbe7b2171c567970e2b4f146e76a19a601b52d6fa5fb60b3b27b382a1b31717a66646697ae870470af1a1
SSDEEP

12288:o/G+AuBVTgSzhmDyLHNVxtkAHnnvOAOyv3brvUKh2ecPX+ql5KLb:oe+Au8WOyZVo2nvOyvrrcX//+yab

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b629362e391933bc9329b0ad8a20f7c3_JaffaCakes118

Files

b629362e391933bc9329b0ad8a20f7c3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 657KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 421B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ