d098deca4163899ce49d13588ff6c303_JaffaCakes118 | Triage

Sharing

General

Target

d098deca4163899ce49d13588ff6c303_JaffaCakes118
Size

71KB
MD5

d098deca4163899ce49d13588ff6c303
SHA1

c6409a0cd0a4498e9cf4efae1fd9d6b54ee68530
SHA256

24e8b3eb6ec23dc40706c1373a07705f8469fda540fa59a600775009623ab61e
SHA512

42a2e8cbef26a87508d598f02f69df4647f2a960d4e34bbb69fbd7bdf21ece6ddded12fce388e209b86f7d26c3e181c2db377c97141f93828387bc50fcc1609b
SSDEEP

1536:WBej95nI6HSpc+UIqnEixqOLaJ5bODuQj:7LnI6RoqnxqRjUuo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d098deca4163899ce49d13588ff6c303_JaffaCakes118

Files

d098deca4163899ce49d13588ff6c303_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ