d6e1c73058ada06284184f52d480d726_JaffaCakes118 | Triage

Sharing

General

Target

d6e1c73058ada06284184f52d480d726_JaffaCakes118
Size

1.2MB
MD5

d6e1c73058ada06284184f52d480d726
SHA1

077a23f73eabe1d938db55d8b7e0682345d54ec0
SHA256

a6527ef20c111cfadbe0e2b471aa2951c357ada6607ac43df82fcebac744d32b
SHA512

fa7edfa434a1eb496404c115c805c0d350d85e02f74e6b1c17bc6e0b2210d3f8f29c3bccedd0a5da617cb0ceb612f329adde3a9b5eba6e72d14e1dea609347fb
SSDEEP

24576:ZBwTqEdbhDPksWNNDU0fYgIPaCB5nOgCZ/m9PjbQYadr7hc3D//:XAbKh1Afs+939adr7Wz//

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6e1c73058ada06284184f52d480d726_JaffaCakes118

Files

d6e1c73058ada06284184f52d480d726_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 329KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 856KB - Virtual size: 855KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ