12b8cb9b2176d93878f09368c206ccc2_JaffaCakes118 | Triage

Sharing

General

Target

12b8cb9b2176d93878f09368c206ccc2_JaffaCakes118
Size

251KB
MD5

12b8cb9b2176d93878f09368c206ccc2
SHA1

1fccac2d41a6042f32aac78d68b6f5e78eae92b6
SHA256

87b88a4e0c69a130da0186b861e770d10c504e11e043fee2464bb0c1b8952739
SHA512

ae6414e9727a92a6bb5df93c0309dc1fbd7f2705a1f6772b19e1e7088e5b5e9d306d4bd3757b164b15637191d4be0e453780ddd2aa79f537a6cc1380e04f7af4
SSDEEP

1536:il1PTtt4k5bra9I5ZYYyCpuir3FRo6T/YNb34jc5kJCJScVnfNTPT/0zvWgWIOK/:Qt+IQRKuQPQN4jc5kiScVnB/qvEIOK/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12b8cb9b2176d93878f09368c206ccc2_JaffaCakes118

Files

12b8cb9b2176d93878f09368c206ccc2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

movlms
Size: 43KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE