d300933c0e720bb5532c650f5dd93613_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d300933c0e720bb5532c650f5dd93613_JaffaCakes118
Size

969KB
MD5

d300933c0e720bb5532c650f5dd93613
SHA1

c8c3ef173fafc767e747baf4edf4c788d4ecc320
SHA256

e6cdd03570fe080dc31459c3e8b3b7a12301f99d2cae30a4d355651fb17b1c55
SHA512

0b8ca0de64051cff30b8df72612f1435e63328d84086a5f97f59c6da934e000fe5ba7c5fea56ab70b13b9417167e6706ef28cdc3e24b7f6db357e5a708cca797
SSDEEP

24576:k86iKeD3G2v0r2a1O3cmrLO2suegOClTrlrZ:k8sg09Fm2A1xTrlrZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d300933c0e720bb5532c650f5dd93613_JaffaCakes118

Files

d300933c0e720bb5532c650f5dd93613_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 808KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ