b876612b73a2acbe0ec054c2579cf533_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b876612b73a2acbe0ec054c2579cf533_JaffaCakes118
Size

520KB
MD5

b876612b73a2acbe0ec054c2579cf533
SHA1

ce69388f3f3ca97d94815c8df297e6d4e9b5e3a7
SHA256

06e4468931d2ca23dc95da1fef469259a42fbee852951664851125dda775b7ba
SHA512

0435c2477b6862c944abcb7fcab5959e3455b61afe6c7032b25a5fda18437520a87f1b6a66285da4ca19340fc51d7add46ec2ff28ba06228e7e6d7d4b95be5cd
SSDEEP

12288:Vf4lfLuRnm53P1D3nLHj+oXKBTN8kTd2GvrvJ8:VkfLjP1jnDj+oovRvJ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b876612b73a2acbe0ec054c2579cf533_JaffaCakes118

Files

b876612b73a2acbe0ec054c2579cf533_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 5KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 535.0MB

.ddncyf
Size: 485KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 923B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ