e236d143af208d1d58cf8a86056fe303_JaffaCakes118 | Triage

Sharing

General

Target

e236d143af208d1d58cf8a86056fe303_JaffaCakes118
Size

45KB
MD5

e236d143af208d1d58cf8a86056fe303
SHA1

2c17850e9c6dcb5642db0342eed4881a7ca1ba5c
SHA256

535040764e83bcba7c1970948d44a3ef6a7d1216ed82fbb08073ee1c1b64f048
SHA512

684b13264df269ed9192a812429da1fee719bf62513f7bfc8e370cadb9ffa1e5fbaef2bb892b1687a6911a43bbb0b741e0d2adf70ae4828c2a332c275485e987
SSDEEP

768:NdbDrsRSKxhyD9Fq2Up96WM4KIZXzNx7fD4PZH0b3upKQMtd4Ghx9kfMcKBx5Z:HbDE+7CpEZ4rXzNFoZH0bf7x9kW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e236d143af208d1d58cf8a86056fe303_JaffaCakes118

Files

e236d143af208d1d58cf8a86056fe303_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.res
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ