d49aa119a306dc1e8aec327de9bae96b_JaffaCakes118 | Triage

Sharing

General

Target

d49aa119a306dc1e8aec327de9bae96b_JaffaCakes118
Size

516KB
MD5

d49aa119a306dc1e8aec327de9bae96b
SHA1

81acbf8f0b0986e2c57d1e5bf12e247c5a155420
SHA256

c0551c111871b08f51bf5c720e98ee23fbc554f6fe137b8b566ee21dd1ef1594
SHA512

87e92a985e7e4fd39daf934ab8e2a9701726cd3b2bd01166bcbde8acf6fc1de370a08447d2cb47ecdf48b01280f03fd888dedbaf90b7900be1579eac2c6b71e8
SSDEEP

12288:vm++Z5zEWQt3mLlf/stXc+dymTlvFwE8AJgCTKHo9BcFR:O+y5zVhctX/ymT8E8AJluI9B8R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d49aa119a306dc1e8aec327de9bae96b_JaffaCakes118

Files

d49aa119a306dc1e8aec327de9bae96b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 18KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 489KB - Virtual size: 568KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.petite
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE