05345d3f3ba5511cd11aba0bb76b8807_JaffaCakes118 | Triage

Sharing

General

Target

05345d3f3ba5511cd11aba0bb76b8807_JaffaCakes118
Size

180KB
MD5

05345d3f3ba5511cd11aba0bb76b8807
SHA1

f44fa1fd0e2917c654e0972bfe3b680a9aff9f6a
SHA256

87f4ba500a9ee7d6d771ca1a246a2f8be9347e6c338f8336b74b6b6876e19bb8
SHA512

76f8010114b223471ca6c8d8aab21c43c62bde94fcdeafc0c220e33e0dae92ecce14df7fbc699f57d98e02b93dcd673be2db012bd09db6126774812fe9022aa2
SSDEEP

3072:YBAp5XhKpN4eOyVTGfhEClj8jTk+0h3D2lU0Jvo+lICoyJcMPqE2IwBJ+:PbXE9OiTGfhEClq9ED2lU0Jvo+lICoyH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05345d3f3ba5511cd11aba0bb76b8807_JaffaCakes118

Files

05345d3f3ba5511cd11aba0bb76b8807_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ