f679925ddc5a1c57c1677aa6839746e4_JaffaCakes118 | Triage

Sharing

General

Target

f679925ddc5a1c57c1677aa6839746e4_JaffaCakes118
Size

720KB
MD5

f679925ddc5a1c57c1677aa6839746e4
SHA1

ebe540ec2f735e104080e448df88c140998267ff
SHA256

d42ed03750eda66436a5aa982c26a364113af24ef838e8250d2c157cda7825ab
SHA512

45cb90ad0605eb3d02727109c05ed9c59cf8e0785f3f8648c01f3617a34b288fe4404287a4db1bfb2eb650b5b0395a7911e843bede3735e086aac51a3f42aedf
SSDEEP

12288:R8gToyxGgFK4dN1XgNexUecc7NZgpZ3UCW+WOEcyZxA+PB3JvE3:R8epZFKA1XFOyhynyZ2+PPE3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f679925ddc5a1c57c1677aa6839746e4_JaffaCakes118

Files

f679925ddc5a1c57c1677aa6839746e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 538KB - Virtual size: 538KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ