d39550b3e11f5e70c10f1c3d2e4ed7e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d39550b3e11f5e70c10f1c3d2e4ed7e9_JaffaCakes118
Size

167KB
MD5

d39550b3e11f5e70c10f1c3d2e4ed7e9
SHA1

b9a90a4bbd425e5408e70ba83d61aa96cc07d282
SHA256

7bb91a0bc13b1846040bbbf41ddf7fc7600c2706cbc735584b10acd7a33e2ec6
SHA512

eb0327d01b0e5e7915c52ad3dd24103147d37bd1c631e9f494b062ee21e6b95f41cea006b65a4fe2a53b038714460cec5177d01a373c6eb33c989dfe57b606d7
SSDEEP

3072:rpsjqvrXCQW9pu8eW7apWTuRmxw8PH/yMMZKOShJ23kAclxEGOB:Zvr49MDWTuR6yMy4Jqvcg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d39550b3e11f5e70c10f1c3d2e4ed7e9_JaffaCakes118

Files

d39550b3e11f5e70c10f1c3d2e4ed7e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 337B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ