f3b19fab302f6b58718f5f143867838e_JaffaCakes118 | Triage

Sharing

General

Target

f3b19fab302f6b58718f5f143867838e_JaffaCakes118
Size

86KB
MD5

f3b19fab302f6b58718f5f143867838e
SHA1

60be32421bea85d8deeeee12d412f351fd7bd720
SHA256

ce49d8f10cf3aeeef607e6e90f0bae3c67f045c3f27dfb35ce497ff02ad0d516
SHA512

e76ede653714abb99ca9c0513c984513e9ec481bfc221d784d6b20aa95260164b3e4973e5c22f0c979191c49bb2bd17ca949efed3bc3d6c8519fbf44186e5553
SSDEEP

1536:mWeKIGlw78TlEoK87SGKB16JgYPdZQfKEuboYjrWt0TSwU6:Z7mr87C+bQfluk50TSwU6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3b19fab302f6b58718f5f143867838e_JaffaCakes118

Files

f3b19fab302f6b58718f5f143867838e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rsrr
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE