cfa04e1b42f8916d2bd99675b17d5831_JaffaCakes118 | Triage

Sharing

General

Target

cfa04e1b42f8916d2bd99675b17d5831_JaffaCakes118
Size

701KB
MD5

cfa04e1b42f8916d2bd99675b17d5831
SHA1

efd9b7c3cabc8c4d177200c3fd4c21c9c3f446c0
SHA256

6abad190533d80bfd8ac9240a46dbaf860e45aca15929cbf22fd2d92d5e621a0
SHA512

ffb6aee5497c2ac0e31c7c121576607f53072249facd59c961074fef064133947e77cbb114d947a4264166e1c1b88ef169794ac4e0a3df78d1d5e50abd64e2dc
SSDEEP

12288:eGcoX5LFf/LY80pUX4DwJ2+B05OEkz4+WqEe4/sVO:AabfTgk4E4+O4lz4Fe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfa04e1b42f8916d2bd99675b17d5831_JaffaCakes118

Files

cfa04e1b42f8916d2bd99675b17d5831_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 564KB - Virtual size: 564KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ