e5514f2465bd43acc9339e3cfe6fde99_JaffaCakes118 | Triage

Sharing

General

Target

e5514f2465bd43acc9339e3cfe6fde99_JaffaCakes118
Size

713KB
MD5

e5514f2465bd43acc9339e3cfe6fde99
SHA1

9e3f117fd4a84285dde65719ce93e9cb30dbdb8d
SHA256

cc5b616ee151f836fb52d686f978123c5427d27f738baaea8583e791f9742686
SHA512

ce04cff9f8b6f50faa95b168aab294580696716cf3291e5dadb54914ad4993f7d3db3f1622136e00838a51bf3695220df40a57f4e222bfb57ce0e72c0137f861
SSDEEP

12288:C4jGha4fxBa4wlDKffkMZvhxgnjeQZbzO/p7FPaE8zcs8a:CKlaBa1sMMZvIniOzOhxiEqR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5514f2465bd43acc9339e3cfe6fde99_JaffaCakes118

Files

e5514f2465bd43acc9339e3cfe6fde99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 405KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ