128bdd69062bc11c2aad603f01f4a382_JaffaCakes118 | Triage

Sharing

General

Target

128bdd69062bc11c2aad603f01f4a382_JaffaCakes118
Size

234KB
MD5

128bdd69062bc11c2aad603f01f4a382
SHA1

0578a5503cbd2ecd8374f5693bf0e229e0fb80c1
SHA256

a18acefbc7092b3b52c125af563e12c6adb888a9fb1c7b0871d9947dcb7e0d2e
SHA512

c5fba139fc74caf954e53b959b67ff823ecb9e81dda482bb6745dece525b2272e5d1c88e4b5e4a04d008bbcbbdd8715e6e8e9dec45058b07fa86e0c8d6ad7562
SSDEEP

6144:dxcwSObYGkbtqwazJ7v8EE0HyKIuFvrkZ:HcdObYH5q9x8wxq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
128bdd69062bc11c2aad603f01f4a382_JaffaCakes118

Files

128bdd69062bc11c2aad603f01f4a382_JaffaCakes118
.exe windows:9 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ