07a5643e72fc220e3e2419850af461a1_JaffaCakes118 | Triage

Sharing

General

Target

07a5643e72fc220e3e2419850af461a1_JaffaCakes118
Size

2.9MB
MD5

07a5643e72fc220e3e2419850af461a1
SHA1

c50837178bd7d4807d522df816a2d801636b0d35
SHA256

963480a52d930ff04c6921ebcc1cee7d766463a3a38f7f385eb85e42e340dfca
SHA512

9a5c5e256c702f6ed0a4d8323fefb138e335a2c8fb822727bf7fc0e68151d9ff58a2a2801ec5b84a85c434392b3550dda0d883fe5032415b2b6a54958d71b85c
SSDEEP

49152:R9T5L5Hrr0f7uziwZ5E1uHW8gRHSTdA54rTUm/sP7g9zMbjfFOe5fskzCq4ebA5n:7T5lrtiwTYuHW8gh625YxGM9ktV5fR+P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07a5643e72fc220e3e2419850af461a1_JaffaCakes118

Files

07a5643e72fc220e3e2419850af461a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ