de82a296c17206dd326d7cf36b1b0201_JaffaCakes118 | Triage

Sharing

General

Target

de82a296c17206dd326d7cf36b1b0201_JaffaCakes118
Size

78KB
MD5

de82a296c17206dd326d7cf36b1b0201
SHA1

40c0fbac1623129e7f4d64109ff374a830dc4002
SHA256

58a814063273507e7583566a001994df961b534f404cbf19c21569b0bd0c059c
SHA512

7a291d20cf3c9246a61fa3e6bc7681a39daadb97332e3bab5711cf8f011924e4ccee5fa8896c1adbacb30e0050f5756252aa867d0c57cda0bf367656857fd4b1
SSDEEP

1536:sD71oupKBmSGg8vmemBg5mdVzvPzsMz4buKCrNz:aBvpGeatn4bz6z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de82a296c17206dd326d7cf36b1b0201_JaffaCakes118

Files

de82a296c17206dd326d7cf36b1b0201_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ