e459fda1cb917827efc20c30542c6bc5_JaffaCakes118 | Triage

Sharing

General

Target

e459fda1cb917827efc20c30542c6bc5_JaffaCakes118
Size

663KB
MD5

e459fda1cb917827efc20c30542c6bc5
SHA1

367d8bf86464b664bae88fcc4e15c45b0834bc91
SHA256

1e40cd5bb53e67de19a9232496692a838a9abd912b307d858214844c321caa79
SHA512

421f6580affc3997907c1a4e3b55485b4b0be25271d8d9b0026c6ad8e6807221ea6dd565d4ba2ae7638dae25c516c88e3fe3dee3bf388d0cdf51a4ab4bd99a0d
SSDEEP

12288:xulhwKeL+U1kDyLHNVxFykqssaDqHnnSXKax7hexRQU3ycSaz9BakKZtmyFkqMgP:xp/LL1oyZVr3q3Pnzax7h8GU3jVzUmy9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e459fda1cb917827efc20c30542c6bc5_JaffaCakes118

Files

e459fda1cb917827efc20c30542c6bc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 640KB - Virtual size: 644KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TLS
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ