d15e83194938e8622e111925e94d8c09_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d15e83194938e8622e111925e94d8c09_JaffaCakes118
Size

635KB
MD5

d15e83194938e8622e111925e94d8c09
SHA1

4e1e1750068b088a15f31c7237a83a3edd7800de
SHA256

1149b982063b231055a058de6e88a146ebbf009e87645a84a31f9830dfa4d3f0
SHA512

ed51bd4aa87395001978eeb896908fc9af4a2ec39e89616df1ab36e27b8af1f415c3cd0835bad00286ac09fa0c971b32be575d628c2ac2528275b19b7534a89c
SSDEEP

12288:K/LuEqy9QGXYZ+Hb7fA6hWYLBup1ngzL69Gojl3vtMK6:86TyJYMHbLpT9IngzL69Gojl3Fl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d15e83194938e8622e111925e94d8c09_JaffaCakes118

Files

d15e83194938e8622e111925e94d8c09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 389KB - Virtual size: 389KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ