f0d573e3e5b5291211141dad5aff738a_JaffaCakes118 | Triage

Sharing

General

Target

f0d573e3e5b5291211141dad5aff738a_JaffaCakes118
Size

257KB
MD5

f0d573e3e5b5291211141dad5aff738a
SHA1

500366b3424c1b8a39c003ebcb31de6f73167eed
SHA256

412d3225d5fb1164e869498774da550e37b5506d42e13b95da6ba6db66344128
SHA512

af384e2c5baa3895bfc74871f0a2cffd171d63f9f0c7aa81a8e912cdd7d90854787d0342ab03d1ccde706ffb0cc493c1a07acf1c95f3cae5345e149cab952f98
SSDEEP

3072:46ZYOxp9tNueDa5AhHm/Aa4ErepG6yxQI8q90oGN1BDVO8RXSUxnkJDEdEs5B8qJ:46mOxp9buerdnf+/qRF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0d573e3e5b5291211141dad5aff738a_JaffaCakes118

Files

f0d573e3e5b5291211141dad5aff738a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ