d302126754e8d9feedf8a89220ccf49d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d302126754e8d9feedf8a89220ccf49d_JaffaCakes118
Size

62KB
MD5

d302126754e8d9feedf8a89220ccf49d
SHA1

63d5a737e43e5030a064ac9297d1e7bee9a38a5f
SHA256

484d22a6735eb5a8896c94c3870b5e173868b194c3f0ac93594ac42b025399ec
SHA512

9ac37ff839ad8667a8ce25c194e014618226309a23299e9a915fbb4c62d5ea7cc570cd552569e7d9aacb84883547f9ea740a91ba824611ef279d213da1ee7e93
SSDEEP

1536:gLwkuM2nkhAoRlbodfOpsDqRdadI40CDyGE3N2:mwk4kN8OuDq8hN+b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d302126754e8d9feedf8a89220ccf49d_JaffaCakes118

Files

d302126754e8d9feedf8a89220ccf49d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 746B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ