399d872f0156982654ec35b6abbed798_JaffaCakes118 | Triage

Sharing

General

Target

399d872f0156982654ec35b6abbed798_JaffaCakes118
Size

320KB
MD5

399d872f0156982654ec35b6abbed798
SHA1

f3bd2be575a1c22e875b2ca8ee3648f7ca29a384
SHA256

b20bcd893d4e29ab5a07f2ad151c5114e5f174e00467d9af32c77e5812dfb9b9
SHA512

c512c896cab304ab89e09b4deae4ba7fe5ea199ca8409cd2103779245e44e9eb938fae8ae6f74b634de2b8c7f946c06d84b8ee97c10f813f6956826ba63d495e
SSDEEP

6144:nKiDrDb8Uw/nmqQbDTuEJy+5niz3PfcKrKywh:KurX3ENQvTMdGyY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
399d872f0156982654ec35b6abbed798_JaffaCakes118

Files

399d872f0156982654ec35b6abbed798_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ