046dd65900e50c4f00d1872ac055aac3_JaffaCakes118 | Triage

Sharing

General

Target

046dd65900e50c4f00d1872ac055aac3_JaffaCakes118
Size

57KB
MD5

046dd65900e50c4f00d1872ac055aac3
SHA1

3f5f54b90cc68291787d8510475e5b3af3742be6
SHA256

b190a00f61a868ce1ac83d0d359e94263f939b3a79bf0fbd3f7258b427dbdcdc
SHA512

21889b277f15b937b654c651dc5bea2140f9ea497ca7cdc2ea9f779ef7456de26647b470dd58acf6c4e9dd15c8233914ac7271199e8f798214eb4704fbcca969
SSDEEP

768:tu88JmsOFMi3tYn5dlD7Fm7xy1Q9r9fSVXTLFRq7bZq6iZF96Fjw:tuXmXW5/HWQsrQjxjV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
046dd65900e50c4f00d1872ac055aac3_JaffaCakes118

Files

046dd65900e50c4f00d1872ac055aac3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ