944672022b9944f6a5bd5a5c989ab738_JaffaCakes118 | Triage

Sharing

General

Target

944672022b9944f6a5bd5a5c989ab738_JaffaCakes118
Size

276KB
MD5

944672022b9944f6a5bd5a5c989ab738
SHA1

de95e54d86ab2da5eaad93a818065e40914d15a9
SHA256

6ab1c1e5c5721a610f532bf98500ce1c0715feb25be6a118949745fcf97fad25
SHA512

3b1e0a5995084f3390efe461c5cc3d972134fa6f130e912378df8bb600240241b5d188f345daf36a8d91145359d9b8f8fd1e1b7664e45253e150bda3dc2293de
SSDEEP

6144:oMqmt1/EIi+aQVfNeZdZJUtpAkBtyEnrNBchQTOO3g:mmt1EIi+aQd6dZ+tpAxEpahQTOOw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
944672022b9944f6a5bd5a5c989ab738_JaffaCakes118

Files

944672022b9944f6a5bd5a5c989ab738_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ