44e04dbefaeb27f5c64c0c8083b4e9f7_JaffaCakes118 | Triage

Sharing

General

Target

44e04dbefaeb27f5c64c0c8083b4e9f7_JaffaCakes118
Size

56KB
MD5

44e04dbefaeb27f5c64c0c8083b4e9f7
SHA1

b6b1dc33988c4122bea24da038d89a65776c235c
SHA256

e95597e068a90a0d08083dafecfd52ed24f3f843614a84559e01a862438abe25
SHA512

45d626b9e7d31006061b522391f1bb7ce65653182adb006e81ab7f20b05bb4f4f52f108bad06fb113374232e0718ea30b92f6b2ad781d96d8d26ef72b9b5f1f6
SSDEEP

768:Wk1/qtE6d7bO0pH/7l1g7ZYmrH3qQJwZNUpf3r8i0E4/d+QfRJX:W4/qtEsppgJOSpN0E4/EA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44e04dbefaeb27f5c64c0c8083b4e9f7_JaffaCakes118

Files

44e04dbefaeb27f5c64c0c8083b4e9f7_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ