c7678fa4c6fec44fd0b73ce1fb1a4d96_JaffaCakes118 | Triage

Sharing

General

Target

c7678fa4c6fec44fd0b73ce1fb1a4d96_JaffaCakes118
Size

3.7MB
MD5

c7678fa4c6fec44fd0b73ce1fb1a4d96
SHA1

780cef39032870ff23bb47da00e966340b16aafc
SHA256

e9debe4deaec3b20c7ef89e2d14e403a83c23a499fd6ff5dad38e0aec8e51cf5
SHA512

d6c28fc395b63c503ff15af9a743540b3ea57901898edce5b94d213eee5227ace9d01c6fad3984ed56aefae1a8bef1d94d7cf12f9d25f8dc98581fed10f2f11d
SSDEEP

49152:Gb9nHnctW0TVgIim36jWtSHZDTvg5iOiyL3tK1Z7fypQ32BTgx0snsdKp:Gb9HV0TVdimS5vciUL3mXVisnUI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7678fa4c6fec44fd0b73ce1fb1a4d96_JaffaCakes118

Files

c7678fa4c6fec44fd0b73ce1fb1a4d96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 479KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ