d04f328732b8f006518cc279a6b228bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d04f328732b8f006518cc279a6b228bf_JaffaCakes118
Size

714KB
MD5

d04f328732b8f006518cc279a6b228bf
SHA1

cd86ab9128ddd8376a7f48d7fde22e841d6f07db
SHA256

a0d2708f228225c789315207aaffef44edb802c15506601e51ad5f543a85e8ee
SHA512

37a0dd35b7d15274495d84d58681e0d84dfb8dd363a32980e9d67df0199386a07fce0a32f657c9746565e03864f771c612196303f6a9ef5e61b1d63ede0b8f36
SSDEEP

12288:yFLpdclqxA6Bs6UPSPL2KggZs4BLOhXiqnt5tOllBUo1:C1d5xA6mjGpYXiqnt52L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d04f328732b8f006518cc279a6b228bf_JaffaCakes118

Files

d04f328732b8f006518cc279a6b228bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 490KB - Virtual size: 490KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ