f07db3aedc3ed0f740bb7bca60c00d1c_JaffaCakes118 | Triage

Sharing

General

Target

f07db3aedc3ed0f740bb7bca60c00d1c_JaffaCakes118
Size

105KB
MD5

f07db3aedc3ed0f740bb7bca60c00d1c
SHA1

848ec1713b889617852a225f63aebe4dbff56a35
SHA256

eb603fd6b9b92d08e5223b4a9dc289d85c2cccddada908a13e00b1b59f8597a3
SHA512

f5f70ffcb843ea73180d8a8767c3823e929d45ca3d5bcc55471f2ec5094ea46b1fc48024c269c9c8a87c00bec5c8ba5ef858458a3c50e3537f1cb798979accee
SSDEEP

3072:mD3ibmxlh2qPWbA/Cmka44e4CCnzG4cnFI:qibmxr5/5LJBzs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f07db3aedc3ed0f740bb7bca60c00d1c_JaffaCakes118

Files

f07db3aedc3ed0f740bb7bca60c00d1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ