404716643cd6fe52210c7f5f3a9fa8a0_JaffaCakes118 | Triage

Sharing

General

Target

404716643cd6fe52210c7f5f3a9fa8a0_JaffaCakes118
Size

195KB
MD5

404716643cd6fe52210c7f5f3a9fa8a0
SHA1

49fc3e0cc0ef3b24ace4aeb3abe6f77bf20edc69
SHA256

ffcb7ffa22386aeb7df9f639a5dd1f7f60f85d03cf65e6cb9f711b366dd757e0
SHA512

61db37961e7ee6a6539bc9e82285c2f59ea1cb927e50207f5848370398a07f841540744fbbed24ce16f2b49ad22da830c213c0a9a70b47617c2ed2f54eb9e4d6
SSDEEP

3072:CBMspkfFF8rhr72IpSd5N7iZXTJlV68WxRJr8Stf2wpD65xWk0pxjZO:sH172II5N6XTp68WxHr5/pDiJ0zZO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
404716643cd6fe52210c7f5f3a9fa8a0_JaffaCakes118

Files

404716643cd6fe52210c7f5f3a9fa8a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 619B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ