d546e8f52a84333f0dfdfbba102fc8d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d546e8f52a84333f0dfdfbba102fc8d2_JaffaCakes118
Size

9.4MB
MD5

d546e8f52a84333f0dfdfbba102fc8d2
SHA1

53861304f183f03b394dae3401d9872e06fac2d5
SHA256

dcfebd737ff72fce2c2179dbac52df073a14c0a0b5dbe2d0a25d9f6896bbdd6c
SHA512

b43e094acda5cee39b7133c1c13055dd344ba56fd2024ea7059ecb4dddcacb4bb20f2ab476ed45db09ef06fd42b9b6bfbb936791af4bce61810a91dd203870e7
SSDEEP

12288:PsJWk4qzS4rpQNrKK+pRQ4ZoVTCV0ovBFH1:UJKqzS4rYIRQ4aNCVLH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d546e8f52a84333f0dfdfbba102fc8d2_JaffaCakes118

Files

d546e8f52a84333f0dfdfbba102fc8d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 731B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9.2MB - Virtual size: 9.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ