5453a7698a9ebd567d615a4289696155_JaffaCakes118 | Triage

Sharing

General

Target

5453a7698a9ebd567d615a4289696155_JaffaCakes118
Size

788KB
MD5

5453a7698a9ebd567d615a4289696155
SHA1

a4f62e4caf268e8e699959a7e224f8cba2b87d3c
SHA256

7defba9e3f92ca8fdbab1413f339321da49cb35128494905fbc45813301d843b
SHA512

bc10664d305fb966acc33e5c1626eaf97a8c4d3a1600029b97650a9206064836ecdd4a6667eab4f616cfddf09feeab15ea37809dd85294d6f64b52a2757e9bfd
SSDEEP

12288:AZ6bTtjWFyR90/8ROlMXwZpjpLeS/RoE/7rPKtxPCQcCWDbPqDSy6xU:86Xtja4y/80HplL//aETrKtxPCdF3db

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5453a7698a9ebd567d615a4289696155_JaffaCakes118

Files

5453a7698a9ebd567d615a4289696155_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 681KB - Virtual size: 680KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ