d2ae6bd66b8104f35a258a696d9b7dc0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2ae6bd66b8104f35a258a696d9b7dc0_JaffaCakes118
Size

192KB
MD5

d2ae6bd66b8104f35a258a696d9b7dc0
SHA1

ccd699b3cfd23fc28c058c97bbd44c9ecb9accd5
SHA256

6cf71af76df78008a9f974b2b9d39f023991023dfd4d38bd43a14d5bdd12c8c1
SHA512

c1b198061a4024f775bb451604a933b9ee9040d16ddc3b9bff634f0339f4d234f7af1d66425632a60823ae2f63d58e7ba358bf3676b27f43ef56876fef8c9210
SSDEEP

3072:36UzoLCdwSI48ugNMIp26txOnuGK0RKntfIYJzl2n9umPHtw85EdYiAy8EdSRNDh:TCPTp26ovwizq46YdpbHD/hLo4h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2ae6bd66b8104f35a258a696d9b7dc0_JaffaCakes118

Files

d2ae6bd66b8104f35a258a696d9b7dc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 424B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ