d335c0b7bbcc0651934f87399a0db5a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d335c0b7bbcc0651934f87399a0db5a0_JaffaCakes118
Size

387KB
MD5

d335c0b7bbcc0651934f87399a0db5a0
SHA1

291a443b218700922f174a53015850f7cf8736aa
SHA256

24a1445e5d872f1b8619e27d628c00b31a9f239fd832cb5a016b73bdc5c733ba
SHA512

770e5b8758c6a9ba1827c1ba6163e31d932855350b9c29b216b0c706724d9e7485586d1aa8ef8eb127c5d484df1d6ebc038baf44d22ed05d5ab4f27756ef538a
SSDEEP

12288:tsY6dacSpJim+TTvSxXTvbm5OYAKIokLEH:EafpJf+TTvKXzOcKIQH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d335c0b7bbcc0651934f87399a0db5a0_JaffaCakes118

Files

d335c0b7bbcc0651934f87399a0db5a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 47B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ