d39f33c1161f396d71ce595bf19569ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d39f33c1161f396d71ce595bf19569ef_JaffaCakes118
Size

4.2MB
MD5

d39f33c1161f396d71ce595bf19569ef
SHA1

2806f07dac7e70f01c49ed304fd901c9dbca44ed
SHA256

dd04263f569e0d09e71843466c32062e7b8de79565f9a76125d73a2adbd618be
SHA512

1f56288bdf31c835670c66a6679fb4082a4b01ce95cf532e23d31c5c32cf7a9983a5c7a915f7390fd6b9b21c7a920fb3ecff7d14955b328d96a4a5e34548d539
SSDEEP

98304:cDOs5NTHTsqPjYOE0MM8LazIam9aig7HuVvCmfxehNW:cnjHYIFzN38R03uVv9fxeXW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d39f33c1161f396d71ce595bf19569ef_JaffaCakes118

Files

d39f33c1161f396d71ce595bf19569ef_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ