c11b9deffd57055c54319b4ab98b107c_JaffaCakes118 | Triage

Sharing

General

Target

c11b9deffd57055c54319b4ab98b107c_JaffaCakes118
Size

549KB
MD5

c11b9deffd57055c54319b4ab98b107c
SHA1

ea734893686d386d3482a02bbf9f84a68634aee0
SHA256

e742d56d3bb5567f831e26c7d9185e5bf2aafee6895b7c129a853d506f6eef4f
SHA512

ee2fb63bfdf2ded7f82fc5bfc7838f5541b094730e4cc836b88a65efbe6d2566a59b071aee631b6b30099896d65e4b0353c8c34b9cf8bb2956c06fe271dd3f1a
SSDEEP

12288:OwccqEsKBsZuB/LRdNBRbzeIgbd3BKsG:OBMsKBlTR3XbCIuTKs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c11b9deffd57055c54319b4ab98b107c_JaffaCakes118

Files

c11b9deffd57055c54319b4ab98b107c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ