d38e41012210104feb8a8a22dae78a65_JaffaCakes118 | Triage

Sharing

General

Target

d38e41012210104feb8a8a22dae78a65_JaffaCakes118
Size

216KB
MD5

d38e41012210104feb8a8a22dae78a65
SHA1

ee3e9cc533ce1a4ccffe126db5c78cb7554e7272
SHA256

dc1c3895a960ec8d43ee8a64a76fa0c1274c6cb5d3d0b4f660792b514ea354ce
SHA512

bf51fc8a08a32d41767f9b5de522651df92b864078e8b421e46cb3cca7c86e79400441c9c8e6685b5cf97f73c74140f75f61840678b3763fdf3462a6f5829407
SSDEEP

3072:L2wk3EgRyqZdGGQNyOytAJOtCjGIlV8LOqSR:5k3fcqZd8MOyN8i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d38e41012210104feb8a8a22dae78a65_JaffaCakes118

Files

d38e41012210104feb8a8a22dae78a65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ