c89f5ba1925dd0db3544f586ddfb23a6_JaffaCakes118 | Triage

Sharing

General

Target

c89f5ba1925dd0db3544f586ddfb23a6_JaffaCakes118
Size

467KB
MD5

c89f5ba1925dd0db3544f586ddfb23a6
SHA1

0d3a0b15dc91d91e255a202d4534ed0bce170e37
SHA256

e2dda472e2816703569a7236db81635ea2ba7e8dffccacb84a0a306b464014df
SHA512

cac64f5c72fd6e552150c4cad92b8cc7be704e17a3b77bd888230eb14a494cc963c82e3b8cc830e70c68fe8418bfad9ac3828f6453adbb183462fc33955682a2
SSDEEP

12288:WoO8uTwo72JoN/DyLHNVZwkLw1WT1HnnmOGZOryKQyR:+8u8o72JoN7yZVHcchnVSuyKN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c89f5ba1925dd0db3544f586ddfb23a6_JaffaCakes118

Files

c89f5ba1925dd0db3544f586ddfb23a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 437KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 162B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ