d0af5e406fb253fe15a603361f8050a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0af5e406fb253fe15a603361f8050a6_JaffaCakes118
Size

492KB
MD5

d0af5e406fb253fe15a603361f8050a6
SHA1

3cd2a1acb481c8c59560a7717c34f3016a30e976
SHA256

2376f98851ba6979444a5e964168de6551df6793758d7d0a0c14a6cdb57a5298
SHA512

56386870990508751a237b791b9f96b3c2020a781510a640c202c18f344e8fe54094a0d0af667f80321c9b698a45716e7a5f73ce0df4974b4e1fcde78beb7215
SSDEEP

12288:bgzW6gBEncrG1FHPqr72tL92DCy2ZoTkPVb:bOnOrG1Fy+jMCy2Zoe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0af5e406fb253fe15a603361f8050a6_JaffaCakes118

Files

d0af5e406fb253fe15a603361f8050a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 409KB - Virtual size: 409KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ