d179dd569d36143a2a5ebeb1a13e1617_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d179dd569d36143a2a5ebeb1a13e1617_JaffaCakes118
Size

40KB
MD5

d179dd569d36143a2a5ebeb1a13e1617
SHA1

4e0c1f097a7a7ac01dc308dc9a1c25d5dca39a8c
SHA256

27a469f7151bd92c14404c3dbcc4b6bcbd4912c9fe755973a9707bd03139b7e8
SHA512

ed0a6a41c36cff0018dbc4f706f291b93f2e058a65096b9776569b00f52dfdb7727b5137e75746b4f620e9783ac6386adf914d03024f5bb41e0d2252d0103545
SSDEEP

384:Z3WjQuAyzJIVv3YFuStwS/Zd+xLj2DSIVGBS3TyPw4EoJY4jcp6OIE9cAgEPQuR:0ayV4A9PDTmKTyPwWq4Ap6Oh9MuR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d179dd569d36143a2a5ebeb1a13e1617_JaffaCakes118

Files

d179dd569d36143a2a5ebeb1a13e1617_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ