cdde3edc559e00788b9e8c0516346672_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdde3edc559e00788b9e8c0516346672_JaffaCakes118
Size

2.1MB
MD5

cdde3edc559e00788b9e8c0516346672
SHA1

4563848d22cd692e87bcd2ec9df168c905b3f495
SHA256

6426ade35702ad40accc0b15789a17dd5bf1ad99cc3ba882a7990ded98b45b26
SHA512

63b4715e920b3f7c0c8bdbd0dfa6769022715f8fa8e82f4adff52a48d2814b993c200e73a77d079dc5d580a482f0d3df7422c419a9aafab1ccef290a9ae9aaca
SSDEEP

12288:bG7NadDg1m5c3RCObxPTDQARW0hRpdp8WuOUTarQo2hhLIw:a5aG1my8MVDpR7hRzYoYI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdde3edc559e00788b9e8c0516346672_JaffaCakes118

Files

cdde3edc559e00788b9e8c0516346672_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 508KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ