d13c1c6f35da1162063e4162c9005cd4_JaffaCakes118 | Triage

Sharing

General

Target

d13c1c6f35da1162063e4162c9005cd4_JaffaCakes118
Size

440KB
MD5

d13c1c6f35da1162063e4162c9005cd4
SHA1

3e009331163854f5fb0bfb75af22102d999df603
SHA256

44c0af540acca92231d1736ae2ff7113226076dd094c4bb893a149268cb0655c
SHA512

28629b2ffb7702cdadd0e6fa851edd3bca8e07d3dc1db9831100ecaa06df45e9eea368840251ccb716543a17188d071412eadad4fdce3edeeef46d0edc0a3095
SSDEEP

6144:aeDMzh1ZnznpbU8aVv2MTAHyO6aOfAbbYOfwYfgU990LyHAwcWuVhHll9F:vIzhLd/SzTMfBblfJt9bA1zV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d13c1c6f35da1162063e4162c9005cd4_JaffaCakes118

Files

d13c1c6f35da1162063e4162c9005cd4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 359KB - Virtual size: 359KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ