ced8137346711a925296a40cec8b0cbc_JaffaCakes118 | Triage

Sharing

General

Target

ced8137346711a925296a40cec8b0cbc_JaffaCakes118
Size

147KB
MD5

ced8137346711a925296a40cec8b0cbc
SHA1

1a60ad369817e154175c742733032b56636a9420
SHA256

ca58811d077bed5c8742545e256058a62d21e38ba28cfa119b29ae84bf41a244
SHA512

28e297f55771e808f0b450680a5ee30e0c23dd2f5b68334d4de7892b8996348292f24c5616a7aee765ced69749809af7b4e2966769833a058add89b2fadc67e0
SSDEEP

3072:DC69mTisRLYFhPm+lhSdVOPoSBgKy/eQPPxV:DCXTkFZx3S/aoEgnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ced8137346711a925296a40cec8b0cbc_JaffaCakes118

Files

ced8137346711a925296a40cec8b0cbc_JaffaCakes118
.exe windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ