0e19b6fdf597f77c44c55b8383dffac6_JaffaCakes118 | Triage

Sharing

General

Target

0e19b6fdf597f77c44c55b8383dffac6_JaffaCakes118
Size

340KB
MD5

0e19b6fdf597f77c44c55b8383dffac6
SHA1

f65f6b740e9b0538013da0436885abb5b90054ca
SHA256

6f2ba452d18b7a729defb86b362983ad4e1946915c6e5e6811339e368eaf2b24
SHA512

4c448cd8b73089d132a6a050e6817736a7715b6b736d5c67229076fe429ac9b5266666889472362fad1295546d69f4d24e1718999645b8b0496bc363bef809f0
SSDEEP

6144:AvJNKezvP71Q4v8mVsVNjlaAph4CCG6rmXbT6l+t3dt8kVi8:4XKezvP7x8cwFZCG1Pt3nJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e19b6fdf597f77c44c55b8383dffac6_JaffaCakes118

Files

0e19b6fdf597f77c44c55b8383dffac6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ