0594c8ea5af6bba7ae254775010f9f7e_JaffaCakes118 | Triage

Sharing

General

Target

0594c8ea5af6bba7ae254775010f9f7e_JaffaCakes118
Size

506KB
MD5

0594c8ea5af6bba7ae254775010f9f7e
SHA1

a857c66ee993d0cb4d25f6b544940ad92a57fb2f
SHA256

1acc111d128f2040c550566885462f709a1e0f0c329f3f4a27787f47fb80508a
SHA512

eb61f01bcfa4b1cc3d4fd3f0533a86d82b84b54bdca62b1fb10ead055237335623f0ab26f3ad23afc455362712ff85955752e7b1e2cfc815439bb7babc9fd0a9
SSDEEP

6144:vRvYmgpSvuteHlJaeRtmZxtET0cQkyPH890QxiFj0OtVGX9ZSCYrRF/6UClC9R9:5v8MHJR6ET03H2QtVGX9wr6Ll4R9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0594c8ea5af6bba7ae254775010f9f7e_JaffaCakes118

Files

0594c8ea5af6bba7ae254775010f9f7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ