978c32d5eb43ced532fab6450490b4ce_JaffaCakes118 | Triage

Sharing

General

Target

978c32d5eb43ced532fab6450490b4ce_JaffaCakes118
Size

676KB
MD5

978c32d5eb43ced532fab6450490b4ce
SHA1

23313ce6e8b7d512df5e43c6695e26f9531360c5
SHA256

d24a34d79e5a56475e63ef396b3c4a34c16d691e0c27bde22757d1fab6497c78
SHA512

7e7ba012455f70954851f2d161fe9a888ca46511979c86c8d79e20013bd3412b4f44b07b4adb0494385aac4bfc33e543d9fa5d2b5847f3924d17946a58f746fb
SSDEEP

6144:BdPRZXBVcgsaASy0JqtTEwF0rhm1uCE/XCAC1ZvvJgdp4oId0wkaN3ETNx3SEPpB:Bl3cw9JoTEwp8CEvTCLKWlN4pXAVTJtM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
978c32d5eb43ced532fab6450490b4ce_JaffaCakes118

Files

978c32d5eb43ced532fab6450490b4ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 607KB - Virtual size: 607KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 23KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ