JaffaCakes118_79b562cc11c3ead2bc48e6fe8b5b0f8e | Triage

Sharing

General

Target

JaffaCakes118_79b562cc11c3ead2bc48e6fe8b5b0f8e
Size

655KB
MD5

79b562cc11c3ead2bc48e6fe8b5b0f8e
SHA1

f53246e8c09c96b90e02d238e46a506540625753
SHA256

c0d09de7e0668e8b31f6145e72a0acea31bdab4ca03ebff5a9824e9cd351061b
SHA512

adb6def87c393450deebb53470567a0ee0b7379007492ee9ee86b8559c9d1b409220c5e0da62dd79943bf61b9fdd3640d14e5e85a58337accce1a5d26e7ca938
SSDEEP

12288:/ESqJwbBEE+tOi1c2xwlqXs4zUmvycM6xgNyJ6DsZuhEP60dIIFazZyun23:/EdYj+j1c21lz/VnxgAJxuOCciZzE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_79b562cc11c3ead2bc48e6fe8b5b0f8e

Files

JaffaCakes118_79b562cc11c3ead2bc48e6fe8b5b0f8e
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ