532a25c69b4a4fac72fe844f24468690_JaffaCakes118 | Triage

Sharing

General

Target

532a25c69b4a4fac72fe844f24468690_JaffaCakes118
Size

266KB
MD5

532a25c69b4a4fac72fe844f24468690
SHA1

cab80ef24cba7c778eaebc0c768ddef4eac4c66f
SHA256

d276c91208c713e1b350b472516bf26f4aec648e44ff5aa733a3d6cea769de74
SHA512

1504a5a03666277f8cfb1028bf4a13bee359a059930b708010d1b608418b5640c9562315264047382265a228647f0c05f010640d1d67b6438449ab085e111136
SSDEEP

6144:YUH0/PbGi+PREGaPf2vbeVdwSfKxGyTqGx7iIn30:YgU6mGK+T2XWJi83

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
532a25c69b4a4fac72fe844f24468690_JaffaCakes118

Files

532a25c69b4a4fac72fe844f24468690_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 94KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 137KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE