d0315825fdf19cf5c593c58327bd6402_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0315825fdf19cf5c593c58327bd6402_JaffaCakes118
Size

68KB
MD5

d0315825fdf19cf5c593c58327bd6402
SHA1

ef68abd85bb2a36bfc499a5b1be3d574b0fdbc74
SHA256

1638c875a8fcfd2f067d92eec7910b266bc31924e0eed2fb50efa9d0b59c9be7
SHA512

4ffbdb7e7c3f761ae13363fb0105b5ce4005396af00a2d07260eef4468bf664bd685def7ec1e3edd5b1031b6e538e298916e427728d2848da1cddfe31653e8aa
SSDEEP

1536:u+d03nn9Bz4M7abdkBSVjQ2NkGDGG4uMce+Gs:utn9BP7EmSlicGye+T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0315825fdf19cf5c593c58327bd6402_JaffaCakes118

Files

d0315825fdf19cf5c593c58327bd6402_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ