613d91658ea39aeff99585b966c3246a_JaffaCakes118 | Triage

Sharing

General

Target

613d91658ea39aeff99585b966c3246a_JaffaCakes118
Size

38KB
MD5

613d91658ea39aeff99585b966c3246a
SHA1

b59c1050b602ad696825f704cb300e2cd4d1524f
SHA256

b490f8df12188219ce0296756798c5ffff1e4e98868ba48f49d960de684fc154
SHA512

a42dd975c0121d58dfe99f5e4ee31443b9648cd1dad9ead61e1c01249e9a8e7d5d00eaa12c7844b2082181e72d2788048f735cbee7ef150cdc82d2c2a5676f1e
SSDEEP

768:XV5Q9oQDI/hWaB79maf3UQe/JEw2Vnf/dXhEG5wR8XHLI6olPtMGJb2:/vgaB78MQYtf/BmGKR8XHheMGJb2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
613d91658ea39aeff99585b966c3246a_JaffaCakes118

Files

613d91658ea39aeff99585b966c3246a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.doobedo
Size: - Virtual size: 520KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.doobedo
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.doobedo
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.doobedo
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE