d23644dc91672759ac3b9b19da8e847d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d23644dc91672759ac3b9b19da8e847d_JaffaCakes118
Size

477KB
MD5

d23644dc91672759ac3b9b19da8e847d
SHA1

89867e178d96ebdfd133122596e8ee7eb03622d6
SHA256

ce6a5dcec8b4089330b14eedd5f27554b53a46a510c1360dcfc052d1662d21b2
SHA512

a9ffac3cea11d29c36861bad567427825a7a42fb63c9e9e8d3a8b0861f10f0f29916e3d0f7a02698782d99ff92a1d73fa47ea7c6b2b41390976f347694d95667
SSDEEP

6144:r6fsiNFGeDjKnz+ZGgWMvw6asA3ElfFYAOkjYr2nU6qdvHVOfVmKvQc4ZgRgntAy:r6RY6ZGgkLWOmS2nHqGtjeZgRgntWR+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d23644dc91672759ac3b9b19da8e847d_JaffaCakes118

Files

d23644dc91672759ac3b9b19da8e847d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 407KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ