JaffaCakes118_af78729c33017ef7ff7455db34c542ac | Triage

Sharing

General

Target

JaffaCakes118_af78729c33017ef7ff7455db34c542ac
Size

872KB
MD5

af78729c33017ef7ff7455db34c542ac
SHA1

563a10172a1d0fbd6d78282432693f9d5b5d3584
SHA256

1396a0b6696ab2c0df67e111ca920ebdaaed066a76c88d31dcc7eef4ab3bfcbe
SHA512

6764bcb0def2594b0ce0fe7d9f2e37ae051e3002673bbfe2a5b557b582b7fbe4e7a8796c6fd39fde0d53153f6ca6016f8064b0bf3851c07df490463b19191139
SSDEEP

24576:12sr/p9rBIOR1ML/AbT+BbcmRKSZX/9npoRs:Vrx9rXLM8bT+BbcmRJx/9poRs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_af78729c33017ef7ff7455db34c542ac

Files

JaffaCakes118_af78729c33017ef7ff7455db34c542ac
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 4KB - Virtual size: 772KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 843KB - Virtual size: 844KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ