d18e5772c0a23c98d2b3a507920e0f6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d18e5772c0a23c98d2b3a507920e0f6d_JaffaCakes118
Size

461KB
MD5

d18e5772c0a23c98d2b3a507920e0f6d
SHA1

310b751f62f152e2832c45c6370e76dbfae92b27
SHA256

d0cc2e2edb48e69a2d1950a17afa3c78bcd81731175ffe9f364517f9d8492c8e
SHA512

0922a18d58dc2f61e656beadf10329a953c1022820ccd78962cfff7517bc2d8f5a06d628acb116e550c4c465120ccdce4fb8f4b1123fb390b829ff0ba6c7ba89
SSDEEP

6144:Ock+7qrfn23a03OIQyuFyRffwkDjYxvt8zzaYeYZ/YNbxw3Ml4l9VDcli:O++D23a03OM9Axviey/bTl9VDS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d18e5772c0a23c98d2b3a507920e0f6d_JaffaCakes118

Files

d18e5772c0a23c98d2b3a507920e0f6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 385KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ