d2a2725fec8787d639b04c53aad8f8dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2a2725fec8787d639b04c53aad8f8dc_JaffaCakes118
Size

1.6MB
MD5

d2a2725fec8787d639b04c53aad8f8dc
SHA1

c004857d6dbd87374ce2a8f2c01fbae8a6ebf7dd
SHA256

fb11c80ee90a062ba81dce9c167fe8ca27af20dae0c1ab8e0899de860209a1db
SHA512

cf489f1152fc371031d5bcdde31dedb297cd5785c55ab6bb9f98b6ef8ea9fabb766b65e20ac69f845809a8a94a8d34875753e20e2b503936965a97f75256b6bf
SSDEEP

49152:XwHwb+1+W0SCnkoCInOu8KcUvvSzb95xA:AHw61+WSkJInOGSP95

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2a2725fec8787d639b04c53aad8f8dc_JaffaCakes118

Files

d2a2725fec8787d639b04c53aad8f8dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 545KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 988KB - Virtual size: 988KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ