b804ae0830f95de5218003413b509918_JaffaCakes118 | Triage

Sharing

General

Target

b804ae0830f95de5218003413b509918_JaffaCakes118
Size

377KB
MD5

b804ae0830f95de5218003413b509918
SHA1

a87fefbe1f05f77c55e82807bb945eff80c4507e
SHA256

1caeb1e0cb385275fd352fa7fdc4e6a7a18ff1d66748bf30de39fbc8efd141f3
SHA512

e354b28465a75f393d20fedadb32a43cd4bbff3881b57f9987f8cbfd6239794a8e21dcf8d441a33edb4b4ae679f150545cf41061541eeb148baa60a3a4f6e283
SSDEEP

6144:S/DxU0p38x3O8I9auHZrwJBQEc83s97JLYUEZ4vA1lG4RALB4q8TH2UbEWhhBUha:/0pJ9auHsBZcujZcA1lG4RLLH2cjDBU0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b804ae0830f95de5218003413b509918_JaffaCakes118

Files

b804ae0830f95de5218003413b509918_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 272KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ