d312395442249b3bcba4e5e318013ff8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d312395442249b3bcba4e5e318013ff8_JaffaCakes118
Size

56KB
MD5

d312395442249b3bcba4e5e318013ff8
SHA1

269cd800c17d53e5740b8096ad3049f3c2a6c3a7
SHA256

17ff8cca111e16ef8232bd135bb7ca938c00a6761534f01ad523b7491d38fb85
SHA512

7af5ca3fec3e73986e4660d917c65d9c856012429fde5d53f132a7eb4d52898f19088ed5551ecdb1c3154de79313b3738f48ee823dbf92c810b6711717063fdd
SSDEEP

1536:dri+gUJA9+fVXURofBTLHbj5KDc6pfqHIXx1tDYte7:drMIAuBVBf71KD5RRXx1JEe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d312395442249b3bcba4e5e318013ff8_JaffaCakes118

Files

d312395442249b3bcba4e5e318013ff8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 38KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PEPACK!!
Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nPack
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE