f789d334217c1680eea257cc90a47277_JaffaCakes118 | Triage

Sharing

General

Target

f789d334217c1680eea257cc90a47277_JaffaCakes118
Size

1.9MB
MD5

f789d334217c1680eea257cc90a47277
SHA1

22bb837c21bd46831fab05b665e6164b4526ea7a
SHA256

8ebd47d939ada0a9e9efd4bc14b1a33031263c58fb6ada7f6425987e20213b7b
SHA512

061f63a2c6987d3cbc650377782feb105d59405d54ab62a590ea261ead04a32ff08c5e585bd7e80c44502fa46360bc052d9c82a66b5ddbe42c55032e930097bf
SSDEEP

24576:mE6uyCPZojSwhSO+sonQ05Inv/F4F4WH3D1rRfj5/EvkbbAuEOXMCsjdiu7CUrf:CuyCwd+snL8F3D1rRbugAu8DUuZf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f789d334217c1680eea257cc90a47277_JaffaCakes118

Files

f789d334217c1680eea257cc90a47277_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 6KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

videoo1
Size: 1.8MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE