d10e67b55befd32992cda23b8997e185_JaffaCakes118 | Triage

Sharing

General

Target

d10e67b55befd32992cda23b8997e185_JaffaCakes118
Size

794KB
MD5

d10e67b55befd32992cda23b8997e185
SHA1

bf8796ea40c481f4c173472b4d673aa2d4906b92
SHA256

58f57f10db219449f530a5856c1e3fee44cbca44a55828b55a1445a5164b6257
SHA512

2134fd0bac738472d2a45ca2999c5ec261cf8a0827dae4402ec31ffc94eb0e046ace041c9b963a21cfca79d4360570a79207d135bbd5dd683b1f361c07224cea
SSDEEP

12288:Wbly675yJo0juRXhT4MghC35C6HWYeOmtHL+Qz1DTonrWReir1f9yE/jFbZtoky:B6ca0jux+Bs3HjmtHL/HrbZ4E5ZtY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d10e67b55befd32992cda23b8997e185_JaffaCakes118

Files

d10e67b55befd32992cda23b8997e185_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ