e0771a837bf4d55425411837f5bfa87e_JaffaCakes118 | Triage

Sharing

General

Target

e0771a837bf4d55425411837f5bfa87e_JaffaCakes118
Size

137KB
MD5

e0771a837bf4d55425411837f5bfa87e
SHA1

d5d6b323ec369dfac12b0eb3e3170f7c73440d1e
SHA256

fd7c5bc6c687ecb82a5fb035bd87805f3d9069962da29b517483ae778d742521
SHA512

1c6e248678aa8cfb6cac4f104fd97ae84d56e87201faff3f680261ca13989275bf58f9d09fb79cdd2d956b038f41aa0636e7eaa7d8a893c23caa35a77ff72993
SSDEEP

3072:IEWDUuuzPx+c4p75lBPfqCCw4W04/9ubeB:8YuuzgcU7M80U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0771a837bf4d55425411837f5bfa87e_JaffaCakes118

Files

e0771a837bf4d55425411837f5bfa87e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: - Virtual size: 953B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE