d0f70f6827a810fc2803c767080756e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0f70f6827a810fc2803c767080756e3_JaffaCakes118
Size

304KB
MD5

d0f70f6827a810fc2803c767080756e3
SHA1

4ad3ce2fb2fd1cf63d14bda93a6f7361177166f3
SHA256

3d12429bedb9be5d8bcd38d8f94d6dce8079cf3dc90c046d30cf10539bde50c5
SHA512

b70ea509a20917c899e22a8075f09d702f78ec6bca27bd2216cef763eee5a73175fe844f89a1f20a8ccfcbcc863e1c7ed7602daa313e3dbb40856d8c5af4288e
SSDEEP

6144:vZHw+0yQcNmOx6xd1I7xbXwNvzEWN7QtnGx1:BHwpytCdq9oN8tnA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0f70f6827a810fc2803c767080756e3_JaffaCakes118

Files

d0f70f6827a810fc2803c767080756e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ