e156e0500088d3164b3feafe28a4b1fa_JaffaCakes118 | Triage

Sharing

General

Target

e156e0500088d3164b3feafe28a4b1fa_JaffaCakes118
Size

693KB
MD5

e156e0500088d3164b3feafe28a4b1fa
SHA1

8dd16292fd935e95ede9e4e08e59d3c04d25bf70
SHA256

789a7860bdf8fbddc66b65c2a6803de15f40b2ee9d030a3dc9b080819d83f0ae
SHA512

2e66233ba35473259426c8ac9490071c453f155d31d1d893a34a59f8c5c726e09d3ea5aa833a84c4d825cb1174048cf8fdee47c3acc9f4b2a3771e8129590745
SSDEEP

12288:U1dlclCLdwOQkGye/GVN6aUMLr9w2d6AJ0SBwU4Yb3MBdYxe1i:U6kL2vF4Xr9fd6fSpXbr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e156e0500088d3164b3feafe28a4b1fa_JaffaCakes118

Files

e156e0500088d3164b3feafe28a4b1fa_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 614KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 21B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ