d3baa3862899a31b906f6c373024c41e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3baa3862899a31b906f6c373024c41e_JaffaCakes118
Size

698KB
MD5

d3baa3862899a31b906f6c373024c41e
SHA1

7716dd410b42ee156571376699299f4ce2d12bcf
SHA256

261b2b70e92916cd5d6c24befb741484e3af9e0f7dfead583b39c7f0e2ab3a5a
SHA512

7c2fb55d24a91667f009b4a5ef91a6f868473b35606642021232db2b37feb576424f15d2cafd41a2ee08958b6b29e9d3fb493f31fbcf6a7a2d20f231d1fb2071
SSDEEP

6144:CDeFGuEutkXS/O0NTLqw3x2tQ8FhxGqHwu5wMnImZkzBGj4pUdzkZYj0HJls1ovx:HFGu7eXbo2OeVwMI1Xpqz2THJ0OClS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3baa3862899a31b906f6c373024c41e_JaffaCakes118

Files

d3baa3862899a31b906f6c373024c41e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 375KB - Virtual size: 375KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ