18c4a1f68da0f28282625f7dca504683_JaffaCakes118 | Triage

Sharing

General

Target

18c4a1f68da0f28282625f7dca504683_JaffaCakes118
Size

147KB
MD5

18c4a1f68da0f28282625f7dca504683
SHA1

c3b2614c959e5215791560f16a068d35044d024e
SHA256

d1fdceba4acde860ef042fe612eb97b03309eb3daedf2f6b294e3038dcf4f560
SHA512

24a4e9422b2a44a8b649601390ede911a0c7a936750bef53f48ff08a1d84bab8e961a0dcac83093da07036ec3a288807deb74920d84905ace938901e213679d5
SSDEEP

3072:y3TmRh0b1R8FN+etWVZ+zKa1oJIv+DMcxx:y320xadsr8vU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18c4a1f68da0f28282625f7dca504683_JaffaCakes118

Files

18c4a1f68da0f28282625f7dca504683_JaffaCakes118
.exe windows:8 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 512B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lhlofi
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE