c854e8899e448cf4e3c579fe0e81f539_JaffaCakes118 | Triage

Sharing

General

Target

c854e8899e448cf4e3c579fe0e81f539_JaffaCakes118
Size

39KB
MD5

c854e8899e448cf4e3c579fe0e81f539
SHA1

a5ad029005ee48615a18f2cd5f0e0cf835e97f5d
SHA256

205c91b42e6ddbe22f84fd086a8350559159b30b15f4ff2e5c50e6ff1600e3d5
SHA512

ed0192ea87467da04d3874a804dc03f225664f184e15c65d4a0ce3f141ff09b99bc7aae3a61ae16a221a6109a8b4244c11b8f7475f5c67114101a4c157b2c1b6
SSDEEP

768:4dKq4Ijsz5wR1raK1uH0Q8qvxOADfOXONg2tJCISwMGF4NtCHM/:0Kq4Ijse8Co5i8JFv2cHM/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c854e8899e448cf4e3c579fe0e81f539_JaffaCakes118

Files

c854e8899e448cf4e3c579fe0e81f539_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ