d2d540e461e3270bd84dd1cb84f49397_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2d540e461e3270bd84dd1cb84f49397_JaffaCakes118
Size

1.8MB
MD5

d2d540e461e3270bd84dd1cb84f49397
SHA1

b1b920cdd2dd251d36489165b8bc671dd13e4ac2
SHA256

a994d24d1d7785fad676d75ea495b98c00c6b298fd1fea6778ce1e0d27f75bab
SHA512

669f76da17875a2eaf10aaa86d8ddc422f4f0dd4770eba9f1803c621aa794d412b72060786a9b1e12c73db9b5bf848a2199bca05f69d3dec2ae2726a4a90d55e
SSDEEP

24576:FovtPXAygd7AjVxQnXf6J0kRXfnoovtPXAygd7AjV:SVYEHQnX+ftfTVYE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2d540e461e3270bd84dd1cb84f49397_JaffaCakes118

Files

d2d540e461e3270bd84dd1cb84f49397_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ