410426bcdbcecc23a17f4bcb5bcb9d54_JaffaCakes118 | Triage

Sharing

General

Target

410426bcdbcecc23a17f4bcb5bcb9d54_JaffaCakes118
Size

424KB
MD5

410426bcdbcecc23a17f4bcb5bcb9d54
SHA1

0fc0ea7cd4ad560408cf5873a3c81ae27409847a
SHA256

a583bf4aa6dfe490f0e50d31686690e1c695eee33060fb1fdc7c2f4c9733abc6
SHA512

12bff466e05dc59357bbb11c880006a1270a697de62dfc7890e792b6d65c429ad7c63bd6f9b90bc7521c93c63fb81b391ab794195edab556741e4d5335a0c767
SSDEEP

12288:umq694i/tn22fovbDPR6UVi+D2gFntj4tj:HX4ipNgvswRCg9tj4tj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
410426bcdbcecc23a17f4bcb5bcb9d54_JaffaCakes118

Files

410426bcdbcecc23a17f4bcb5bcb9d54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 316KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ