d33785a2f9dbc624a26acc7aa3b10511_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d33785a2f9dbc624a26acc7aa3b10511_JaffaCakes118
Size

846KB
MD5

d33785a2f9dbc624a26acc7aa3b10511
SHA1

68a135e9a1c610402494faaa1f1b88ee7f2695bd
SHA256

c38532e140660b13d15b47ea616ffb4c64b3182593d8821594198bfc8b8354a6
SHA512

97e791d08c0984f38a50b8aedebfcf2a2550c9c75ad10e517686e6e0058cfd28973509b5ff24c2def3410c45fb482816d1e70cd68096b8883247e7f149bd39f4
SSDEEP

12288:ZQdrqWXmAIcbDCntXNxssSTFtbEkDk7rg3HOsSjubLuCAFYlnHJdvE:ZIOwIcbDuMhFDGYHy8eFgph

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d33785a2f9dbc624a26acc7aa3b10511_JaffaCakes118

Files

d33785a2f9dbc624a26acc7aa3b10511_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 678KB - Virtual size: 678KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ