JaffaCakes118_228b4a86ea5dea46752a4e1d554c6fa4 | Triage

Sharing

General

Target

JaffaCakes118_228b4a86ea5dea46752a4e1d554c6fa4
Size

582KB
MD5

228b4a86ea5dea46752a4e1d554c6fa4
SHA1

80a80bfd6f6b7db41900935948e33330cdb2b95b
SHA256

52e7c0ecf398bbf3ea348de4b0e0bc28c64daa8cf676dd8588b0c1279f923e63
SHA512

9c2c9182793fd30c2745d7f07a44be80f58b4fb0111e2f8ffc47401bb8f32404412195e320e2b21bc8bdacb919270b5881987839deb5a0cdcc7c6c8359d4adb3
SSDEEP

12288:AkiTAHlI6M/MZ0RCuRTK16DyRrTDz+j28isNdsq80L:Aki0EMORve1f9vz+rs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_228b4a86ea5dea46752a4e1d554c6fa4

Files

JaffaCakes118_228b4a86ea5dea46752a4e1d554c6fa4
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 578KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ