d2bc0829abb13fcd6ddd5231be3434b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2bc0829abb13fcd6ddd5231be3434b8_JaffaCakes118
Size

230KB
MD5

d2bc0829abb13fcd6ddd5231be3434b8
SHA1

be50511655a87fae6530fb9db9cb0d3c2776ce50
SHA256

54f1baca29bcfeb8cc5df1bd13d70032095a849f962c93e7df98de4e078b00f4
SHA512

785cba302dfb98cfe6827be3c8be0db70c170807fd92ec491f3389e525e638e18410b7030f59fdad2771170ebbceaf4efaf2e900f28fd680d8f03acb78d42d0e
SSDEEP

3072:5YMyrfG866666Qj2lTaBxdT1Hti5NBpw5TUBbwcUu0yx9wYgpVJbNVuuCIXU9y5O:2M5Jo1srBpw5+XkHVJjd2wzvvPTFy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2bc0829abb13fcd6ddd5231be3434b8_JaffaCakes118

Files

d2bc0829abb13fcd6ddd5231be3434b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ