d08ce406f417b4c0c76a37c087af5aa5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d08ce406f417b4c0c76a37c087af5aa5_JaffaCakes118
Size

134KB
MD5

d08ce406f417b4c0c76a37c087af5aa5
SHA1

41dc061e7c2bb6e6b6d47ccf233d9d393b7b8577
SHA256

0199c19fd4811ed14236878548260047d9432feebe70a89e78b7a725e6df4714
SHA512

ed7367f0b93ae7a986455c4e671827b8653e1c6cb6fd5e77264949a4599058d064d8b95b4f60f7b681295a6c1f5106b56c2b09472bf23bf914f40e4abf8682e6
SSDEEP

3072:qeDClmZ+BjgE57sQW9bKfr7IqOP46AeOIF:+li+pT7sQQWQq+r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d08ce406f417b4c0c76a37c087af5aa5_JaffaCakes118

Files

d08ce406f417b4c0c76a37c087af5aa5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ