56e8a0988fd463bd4794de120c744f41_JaffaCakes118 | Triage

Sharing

General

Target

56e8a0988fd463bd4794de120c744f41_JaffaCakes118
Size

65KB
MD5

56e8a0988fd463bd4794de120c744f41
SHA1

f5e8c047dbeb3dadc4b7b1a23300ea7f64e81818
SHA256

b4c1bf5b92958705e56ece67ce9ec1cdf4224cc06f6b07e84635819888fc767b
SHA512

1136dccb539bf74385058e3ea411a1a35b67c9f10205eb9067fd629cacc82cfa15cf4c2097414fdf0ab336910e7da9f69f6a664df8bc40e5d2ffd6c367969a5b
SSDEEP

768:PfoR+ex+mazXzvuMpMLLkfP1JrMRuD1vSc507DQ+BXLUCSDzlfhBod1J+8xbbpN:P8+rN/uM2Pg3M61vSc4Q+xUCSP9EJ9dN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56e8a0988fd463bd4794de120c744f41_JaffaCakes118

Files

56e8a0988fd463bd4794de120c744f41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ