d783443ec9ad9fcad1c7b18dfc154798_JaffaCakes118 | Triage

Sharing

General

Target

d783443ec9ad9fcad1c7b18dfc154798_JaffaCakes118
Size

711KB
MD5

d783443ec9ad9fcad1c7b18dfc154798
SHA1

ed7d4973b834f9f215e070e264132efdc5c87b00
SHA256

21c1d44a7fd3677910f3bfe102c73dd477f0e555d78442c7ba8da827d888dc28
SHA512

e44cd79187b08deefd913c21737b53eebeb64c6d897d77ac75557b12d82a6b4201e964a210c5a4b4d52279d2ce72e12d9850a6a1c09e5b2214ca2df4f5f429a8
SSDEEP

12288:StDpPDULMdI0GSMewuFxmFfNPWjM6amxjF1TqAcO1oL7L81J:S3PD27S8MmFFWMmv1+AcO1qwJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d783443ec9ad9fcad1c7b18dfc154798_JaffaCakes118

Files

d783443ec9ad9fcad1c7b18dfc154798_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 411KB - Virtual size: 411KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ