d22bfb7972382794546029b92413cd79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d22bfb7972382794546029b92413cd79_JaffaCakes118
Size

28KB
MD5

d22bfb7972382794546029b92413cd79
SHA1

0ac79c2824a8675d9c2a6b77e98e709360f2d49b
SHA256

652088828fe8aa0741731b96cf95d4115659de41b95d8d9302c810aab84f1dc7
SHA512

67dfaa1891f711826f5d3ba822ae69e0f7a551ce70be1c64d2175e7d318ffc6a25e82ed537ad00998387beb5cd4b5a871ee450ed1a656b7aa8e3ed9714296560
SSDEEP

384:4pRanWImmJySRHfJAUf4H+jE/mNJXS6dqzClAJmWHwX+Bg3DlZFco+F3bxulIejC:AaNuGHfONn+NoelknQOeJd+1fejcL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d22bfb7972382794546029b92413cd79_JaffaCakes118

Files

d22bfb7972382794546029b92413cd79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Jiaozhu
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE