c96fc89be59b953662279b426e997955_JaffaCakes118 | Triage

Sharing

General

Target

c96fc89be59b953662279b426e997955_JaffaCakes118
Size

36KB
MD5

c96fc89be59b953662279b426e997955
SHA1

8787f03a3843484e2fc48efed0e97ae84812499a
SHA256

7f76378bdca3314693599d6c3c2c0d705b5799fc385d33e15f4f254c74cf8347
SHA512

d8b62c4d7faa339cf4c9ded990685647829679d44cbe3d17a60330dae52e4c47fa70be76be952304e7a70bda1a5c88c9a5b062b58798e3d4984f3cad5e850412
SSDEEP

768:a3FZXjQHh+JE9RfV0zwRUFh/Xti07ZrZArJTis3rYwqzeBt:qyB+JE9drUFpfZraoscwOSt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c96fc89be59b953662279b426e997955_JaffaCakes118

Files

c96fc89be59b953662279b426e997955_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.shrink0
Size: - Virtual size: 256KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shrink1
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.load
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ