d0faf447325802e61669314f7e37b893_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0faf447325802e61669314f7e37b893_JaffaCakes118
Size

23KB
MD5

d0faf447325802e61669314f7e37b893
SHA1

932a423524c5ecf69cd90f2b8197bd385abd0369
SHA256

7987bd620baba5921f7f2239c00c6aa1a0963949e7cf06580283d45f7b666149
SHA512

83e483500548ca1635620b6fcfc2c93d35ed07d4ca2eb9a5e57282aa6ed2fddaaf7b4679104f3eef468f2928f4d88a6ac13bfa191379d613bb59b1a58bc5a177
SSDEEP

384:vEp/auSjsFcq9Mq9/S9daJxqpqyLohNX9:vC/ausa0vuJKqyLoh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0faf447325802e61669314f7e37b893_JaffaCakes118

Files

d0faf447325802e61669314f7e37b893_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 501KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ