d0afd7c28cc48e4390e60d15918a4042_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0afd7c28cc48e4390e60d15918a4042_JaffaCakes118
Size

60KB
MD5

d0afd7c28cc48e4390e60d15918a4042
SHA1

fc5449b0d6dea82229b47bd780e6e0cdb1d02dfc
SHA256

57ac2dbf6b0f272a0a3dda8297d1de49afe1dbf8deaf20a02a244fb18e38099f
SHA512

33a1d6a674053e3edef990c32752aab3702d9361f018a9a4b05cc16939329ff669417fa3e436774c243cb9f45714d22724dc957418a08ab85b5ed92bca0d73f4
SSDEEP

768:L68JXZZU2Al2CtjMwVkU9wzOsG8rbf/Q9sYU60dM47fhV6b5EByaqpzqZ:LL4zNMwV5oOj8rbXmPU6WMKfKGBnyw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0afd7c28cc48e4390e60d15918a4042_JaffaCakes118

Files

d0afd7c28cc48e4390e60d15918a4042_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 196B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 216B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE