211dea94da6caa413301cc327caee072_JaffaCakes118 | Triage

Sharing

General

Target

211dea94da6caa413301cc327caee072_JaffaCakes118
Size

756KB
MD5

211dea94da6caa413301cc327caee072
SHA1

767c8d0fd76f9c1e3ff8bf4de78482cfa7ea78df
SHA256

27619eca4e836fa91cdefd2596ccbb19edf3f3b78776b8d0911edebf1d66d63e
SHA512

2dd5616a31b7a709de80dc94b1b81fca41b5f74c868ed0f1bc612cd3210bc3cf3b0e1c83e7db5202af2a8e34fed945e77ee0c6e8ed8500700fae0e2d371b0995
SSDEEP

6144:0HQLaP2jIuEYiKs4cv/UiGeb6IXxf3qXcScUIj+uLi3Uzs:KQL/oYNmpv+IXB3BScUIjna

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
211dea94da6caa413301cc327caee072_JaffaCakes118

Files

211dea94da6caa413301cc327caee072_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 488KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dkdgwyk
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE