e31655fd483beedfc4ca77e3273473b4_JaffaCakes118 | Triage

Sharing

General

Target

e31655fd483beedfc4ca77e3273473b4_JaffaCakes118
Size

733KB
MD5

e31655fd483beedfc4ca77e3273473b4
SHA1

8616ec8cb737c5f56845c63f8002ea92fb353672
SHA256

2acc6bafcbc97e42231fbb8ddf2ee73e284799ad9ad2c9b2da90b07d593a1b29
SHA512

7af05e3a6dd17fafd6bb8aff6d0fbc9b281dd447aba766cccff95efa868dddd360a64e9456c0dc4d0a27c52039732fca93a43f67f1aa99144336b2b86fd76b83
SSDEEP

12288:Nc//////qCHkdPLQ/oV6a1xEUQ4IfV8k9YGhGV3m8VWUY2TD9MAX+hmXhVITCFS:Nc//////JEdDyaDm4dahGV3hko1MAX+z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e31655fd483beedfc4ca77e3273473b4_JaffaCakes118

Files

e31655fd483beedfc4ca77e3273473b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 707KB - Virtual size: 707KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ