d207d8ad7cafc6876489536dbf8a94e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d207d8ad7cafc6876489536dbf8a94e3_JaffaCakes118
Size

12KB
MD5

d207d8ad7cafc6876489536dbf8a94e3
SHA1

1423ea696b16f458c0451629618609557c846234
SHA256

eb6692bfb5de3d79b3da9f4f3ef8e470f97732b2f3db2272499391f9fcade121
SHA512

49ef08f662e362e291b89f62e92e0f6dd70758c6033154bb2b67d76f44142f222724bba88991fd298c9099dd51a5bc53e50b04ca9ec7173e106456c27b632aa1
SSDEEP

192:n0cGc1Zl2+VAfNxl1THs6xgzgVGjPlRdqL766nQAlKhFo22Xs6Z0oWz:xGcMJxDTHfRm8Hc6tWz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d207d8ad7cafc6876489536dbf8a94e3_JaffaCakes118

Files

d207d8ad7cafc6876489536dbf8a94e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 17B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

lk
Size: 512B - Virtual size: 520B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE