d55157ce40997173ae7fe9669209d684_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d55157ce40997173ae7fe9669209d684_JaffaCakes118
Size

998KB
MD5

d55157ce40997173ae7fe9669209d684
SHA1

03a3f9c36edb77ff70b18a70250e7b8136507d0d
SHA256

6d158c34e2af17e625c3ed9857571db6675dd6341e7cc0b1d94cc2357804cdb9
SHA512

ee9329d6645578efded5f6fec6b1124994e6c4a8fc2b82b950b81009680ef3e99db33fdb25275a4b46977d5a3014b089894e4d12201f534de20425d158a44f2e
SSDEEP

12288:OCQn9jL9F99A+D+dP24m5th3GqNcGjLnXagmNRsa4qHJmHmGdfKnw76UKpgMk7JK:OCit9A+D+N24EhWsLXaNt9pmHRb+Fk7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d55157ce40997173ae7fe9669209d684_JaffaCakes118

Files

d55157ce40997173ae7fe9669209d684_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 330KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 630KB - Virtual size: 630KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ