d3981b6a5d42a2fdf4accaadd6224c8a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3981b6a5d42a2fdf4accaadd6224c8a_JaffaCakes118
Size

169KB
MD5

d3981b6a5d42a2fdf4accaadd6224c8a
SHA1

971c5ef0cfa607ee3a95baaa140130544b7f3946
SHA256

65714da05e23eea18623a3a9c7c9ba3c3da139417b43c51112dc322799882806
SHA512

19831b57a31d0ef4613cc931719633b5224588a403942c662261ccdccf5d0941f9d314ef73d49689dbf8d9f4dd4be2b0dbe4da82ae5c07e00a46618d44cfb7c2
SSDEEP

3072:QWKoeDMcSm1MOArU254hs2CWf6qU6bj2EnlZmW32OckDDxS7kETU5:VCD1zMOQU22mx6byQZ4OWgETq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3981b6a5d42a2fdf4accaadd6224c8a_JaffaCakes118

Files

d3981b6a5d42a2fdf4accaadd6224c8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 273B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ