d39fb94d3523898d5ff8416ba3d8c120_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d39fb94d3523898d5ff8416ba3d8c120_JaffaCakes118
Size

442KB
MD5

d39fb94d3523898d5ff8416ba3d8c120
SHA1

6b9f7441a900680baeb3b94052790e06f3db4acd
SHA256

8f4afb1250cbf5493563f42d285545bd145ddcda26c15c1eae7dd1a01f816d24
SHA512

213f029abbc1840020c233eea2dbb77d502e628b7c4afdfbbba0657559993a64172c40b22fbc04aa4b6157906865e04db5bd9930d51156794ede6243dd3b8c4b
SSDEEP

6144:0uhHiMuAGetHQ3EPAY4x6kROxX5kqKbI8WCPm6EI9lrGBE+ImDe9Jsh:0uhPuALHQwxjMTND9lrGBhIOera

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d39fb94d3523898d5ff8416ba3d8c120_JaffaCakes118

Files

d39fb94d3523898d5ff8416ba3d8c120_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE