10e433d996e8f982a509a504a6307eea_JaffaCakes118 | Triage

Sharing

General

Target

10e433d996e8f982a509a504a6307eea_JaffaCakes118
Size

207KB
MD5

10e433d996e8f982a509a504a6307eea
SHA1

e161cd4031030d91ab573a637e373ef81ba1432f
SHA256

b120b0d1b4c89095984db3609f0661ba05cd63c8da1190677f1e15f5a5fb2545
SHA512

9ced54c4981a7750e953e50f086a63e6d5c3931397c176badca796279b08310706f40954755147e7c155f103ebc85d393d1fc42e5621f4d907ace52fbaaee1de
SSDEEP

6144:TKtLmSNfUL7533GsiyGlfwsCv7siE1woaBx8pmhP9lJTZ6x:aLmSNfQ7R2sHGlIsCIe8pmhP9lJw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10e433d996e8f982a509a504a6307eea_JaffaCakes118

Files

10e433d996e8f982a509a504a6307eea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 573KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ