d393ba9d00c02705ba2af69a49fe85fb_JaffaCakes118 | Triage

Sharing

General

Target

d393ba9d00c02705ba2af69a49fe85fb_JaffaCakes118
Size

815KB
MD5

d393ba9d00c02705ba2af69a49fe85fb
SHA1

f6dcf3945b66b232140f17cb67654b0bad6bce12
SHA256

45983487ddfcbec89520faa6a63f31302fd41334cae5fa7195daa21342ce8178
SHA512

3455e4f149cb6306964944391aef0f90dc57cec05b98114dce8c96b91f04f2608be5603d95e5a1d06fafe23d6eeef41012a2fa4d82ad0891a8cf72e7bf70a2a1
SSDEEP

12288:tos611qjJoT59CuGd902K7jV9JHBFZMGo4MPy1/dchLudod82GSFN:ojUo7CucgTnARq1uhaqdv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d393ba9d00c02705ba2af69a49fe85fb_JaffaCakes118

Files

d393ba9d00c02705ba2af69a49fe85fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 702KB - Virtual size: 702KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ