00af3e93612738924056dd35b29af590_JaffaCakes118 | Triage

Sharing

General

Target

00af3e93612738924056dd35b29af590_JaffaCakes118
Size

190KB
MD5

00af3e93612738924056dd35b29af590
SHA1

713aeb9a362bfde6daceae17061cc63bdb25dcf0
SHA256

0a47d3ead8b9b8ec2c699253b5822b288c6be77cddc9e114bfae134b7d43a052
SHA512

165f93b0073d27fd8cb876c12b4d23c743758ddf826973f8055b64d213cc278b7b3d4d401ac3e8b0ff8adb3d35cad69a48db12e539eabde7d7f0d5cf46d0433d
SSDEEP

3072:JCjqjmZbnFFRGzP1KxJrZgaC9QBnlZYEdugGqLiKz2WYyrIq3hQtpqB3y6SaIo:JCjqCZjFFRGDM2z96nkEdugGIz2WAYSG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00af3e93612738924056dd35b29af590_JaffaCakes118

Files

00af3e93612738924056dd35b29af590_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ