f70ae44b44db544fed76c8ab51287339_JaffaCakes118 | Triage

Sharing

General

Target

f70ae44b44db544fed76c8ab51287339_JaffaCakes118
Size

192KB
MD5

f70ae44b44db544fed76c8ab51287339
SHA1

0c42f5ec5bdf21cc0d14bbff34fe083497a95639
SHA256

93a7a884e40db636128e6dafe1cdc38f544fcf67c1770851183718daab62aae6
SHA512

b7096c4fa583248f8f63b5e1c82e93b19adf9b107e16b9766a0fe17e51adaa20f325bd9e3f6f3b55a90a41e637ff3d4ea190e4e6d748992bf04b0d6bbfbc3417
SSDEEP

3072:h0S3998mTgQBUkLZ1fdo50IaCy3Yx0PEllpjBPQnXfQkjlz006xI+F2KehRlnFaX:hTrZUQBzForaCE5epjpQXokHm2F7zP4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f70ae44b44db544fed76c8ab51287339_JaffaCakes118

Files

f70ae44b44db544fed76c8ab51287339_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Bss
Size: - Virtual size: 289B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 24B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ