15da0cc69b02e37a646e7426de4372c1_JaffaCakes118 | Triage

Sharing

General

Target

15da0cc69b02e37a646e7426de4372c1_JaffaCakes118
Size

889KB
MD5

15da0cc69b02e37a646e7426de4372c1
SHA1

d1c0eaf33adfd31a3e88c33ce90d8005ee064e36
SHA256

82677344e7a5797d802e46a0b5c73ee9bb833803bf8377d61ed74e6a5729c68b
SHA512

d5f929702d7d0d8b607d687053da3ee13b687045f21175cbda135a2dbe803c76a70181c780205eaa8d9f3205382d47da39ccf7d9015807cb1ee28f2d247d6ec8
SSDEEP

12288:igXxBO18+Mn1slH9WQzfH5afgkelgp+HWBsqX1L0TgZI2x2uX2cEhTpjI:lhB/VildnfHwT8gp+aPR0TwI20x1TB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15da0cc69b02e37a646e7426de4372c1_JaffaCakes118

Files

15da0cc69b02e37a646e7426de4372c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 764KB - Virtual size: 764KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ