44e7f53a79b4904e481580bd19025d43_JaffaCakes118 | Triage

Sharing

General

Target

44e7f53a79b4904e481580bd19025d43_JaffaCakes118
Size

160KB
MD5

44e7f53a79b4904e481580bd19025d43
SHA1

3a294a3dae12481ebc3d6f16839dcb9b72dd74c7
SHA256

a7781c2e245c3710d71867a8c72972a6a93b3af25947dc6b2fef11ff375c11ac
SHA512

d2bc79d64bea26db7288319d4edf08ea301b1e9dd442d683e6567729e8fc4be3f3f0caec54d3d4abaa4827cc0b3e648bd568de0ddca305585e01e82384a589fb
SSDEEP

3072:ac/T34yi7qEPuq8K/vhE0T1ool0RIUV4qPbHtycvCqyDdYOxQ8OjIJfB:Z3bynuk/vhV2o2RIUVlDHtyaLeeqQ8Ou

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44e7f53a79b4904e481580bd19025d43_JaffaCakes118

Files

44e7f53a79b4904e481580bd19025d43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

098760@

Sections

CODE
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 309B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 67B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata
.idata
.reloc
.rsrc/MANIFEST/1
.xml
.rsrc/version.txt
CODE
DATA