04215f6ef17ab95184bed8066866df5b_JaffaCakes118 | Triage

Sharing

General

Target

04215f6ef17ab95184bed8066866df5b_JaffaCakes118
Size

341KB
MD5

04215f6ef17ab95184bed8066866df5b
SHA1

f6f5f66acf0eaa837bed33d53d228289443c0330
SHA256

09c0741824fad336626ff294cc7d2581b647aec4ed2dcf8aacf299a99e0bbbb4
SHA512

8e93c6a6d4d64773c43f9012ebc963ae2d1e59aa609d75d928b80f8cfa8352d62c39af5aac2192ee34e9c0f49839f048b8380afe199854f3553e848e0a83c7e5
SSDEEP

6144:dHdIJLWhT/I+l/wy8yFwVHyl1kcyKyvgonj2FfyoQaLR0blYtM:dHdIJLWhXbbw6aOyv7j2FDoX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04215f6ef17ab95184bed8066866df5b_JaffaCakes118

Files

04215f6ef17ab95184bed8066866df5b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ