c869443434863f795b088857c90e1b88_JaffaCakes118 | Triage

Sharing

General

Target

c869443434863f795b088857c90e1b88_JaffaCakes118
Size

51KB
MD5

c869443434863f795b088857c90e1b88
SHA1

f613a375650082efb4c8454e3c9eaf73e702bb1b
SHA256

46a3b147edc7c079e06241ce293a779cbbd922393ac830ee17b9836afe5b0177
SHA512

8f9a1a45517df4de44e1522f0292364105a07b4fed3fa7294f6686dd38aa7ae2613060a50067468e77a37c02659e26acedb1a10796aa5a71bfbf0314c80b31df
SSDEEP

768:NWtsGdcia4B08ckJs0NlugWN6fcihO38t9O6NMaGbbRp8y+NpI0wBptk3QvX:Uja4B0LgluPonhY8aNasU/cJ7v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c869443434863f795b088857c90e1b88_JaffaCakes118

Files

c869443434863f795b088857c90e1b88_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ