19dd1700613ffe2506745e1e6dee6daa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19dd1700613ffe2506745e1e6dee6daa_JaffaCakes118
Size

269KB
MD5

19dd1700613ffe2506745e1e6dee6daa
SHA1

aa7b8da141e0cea4aff4a8f7903fbf2be15a9f76
SHA256

519f0e8e53dbe65a513db0e592e2d1fa6c3010912b2f5e96fa0264a03da3df01
SHA512

ef2188a8325ed0f4e8ca6836b64632e3bf97072828894d52241215bf30e73a35c98d238f038f55def7b15490722a1f3c657f5804dbf7bcd2463368be56cd5a6b
SSDEEP

1536:2nANVmUQFYbCYvHCeN6zisyrFiBpSV/HxS:8y7PiqSyrQB6fxS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19dd1700613ffe2506745e1e6dee6daa_JaffaCakes118

Files

19dd1700613ffe2506745e1e6dee6daa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.Upack
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dswlab
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE