e1698ab16faab34a0f6f0a3e98a1546c_JaffaCakes118 | Triage

Sharing

General

Target

e1698ab16faab34a0f6f0a3e98a1546c_JaffaCakes118
Size

269KB
MD5

e1698ab16faab34a0f6f0a3e98a1546c
SHA1

438a3e42ce88a90596afde24cca88b6eb40f0f18
SHA256

4b65a993240341fa2af62d0dc7d7ba30ebe2d7d71eeff3eb81cd8e9a678e707c
SHA512

db43968fd5ad10295435800667d0dd88be3300953894e4fa1bf8d784f3186f7542ef4256c2adaac6401103c52b271183ee05da62661f73dad770e3a04bb8aab2
SSDEEP

3072:uZKoA0WzzKVWNx14jTowqhv4E3Rt33BySaCS7OF3ZkncFk3qx2hdvBhYS+9ZWDmc:ZBGVO4zEe8F3XqPJF7ch

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1698ab16faab34a0f6f0a3e98a1546c_JaffaCakes118

Files

e1698ab16faab34a0f6f0a3e98a1546c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ