c1e427613c2783be1f1cfab2f6235469_JaffaCakes118 | Triage

Sharing

General

Target

c1e427613c2783be1f1cfab2f6235469_JaffaCakes118
Size

441KB
MD5

c1e427613c2783be1f1cfab2f6235469
SHA1

f07954940c96b3bebee00a7ec71c72919a0c8c64
SHA256

36ecc09d955c302d3413e331112e5fca1dec3c01de55ea0aabb8a027b0d0f388
SHA512

b40015e8018cb7c8710ab00b3d86b3cdffc2e99a1b421d121938328fb18af06be28ecaab4a24424c24f72bec95d3ca6df762ced4c10e42f337f3f6a8fa5669f2
SSDEEP

6144:OX1V5qLYsK3cwTBc0+1EX0Zv278/aGNR7oO3ytpwhCKoa1mwjSJLMtpYbgQhF6Ya:AV5qLYv3cwThqCXO3yQLf1mwDw0SqHNZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1e427613c2783be1f1cfab2f6235469_JaffaCakes118

Files

c1e427613c2783be1f1cfab2f6235469_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ