d266ca1b55ad2a57f13207f2ec38cda2_JaffaCakes118 | Triage

Sharing

General

Target

d266ca1b55ad2a57f13207f2ec38cda2_JaffaCakes118
Size

79KB
MD5

d266ca1b55ad2a57f13207f2ec38cda2
SHA1

e15c557e21350b54308f1b18f51db254be5f5664
SHA256

7fa4e1513aaaf258646bd0ef509a68b99de5acc23428007dec6bf114033d972f
SHA512

9211aecdbb5bacbe3b68898c9c4bce0f7f2e7dc393aacd4492986df87aa29eb5a518c9d2af7b0131be142820d540fbc90a2c79f515da0cf6ad906adf1e31d04d
SSDEEP

1536:7r3G8zWWlaqymr8Vq2EQDHduPv4iQzYZMQdgFHmv4CGnXcxNYYt5kltkkpvAsvQ4:XGoWiabmr802bD9niQzYZxCmvAnM/7sJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d266ca1b55ad2a57f13207f2ec38cda2_JaffaCakes118

Files

d266ca1b55ad2a57f13207f2ec38cda2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 301B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ