d3ccc348e4bd96e767738515eb8fb31c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3ccc348e4bd96e767738515eb8fb31c_JaffaCakes118
Size

24KB
MD5

d3ccc348e4bd96e767738515eb8fb31c
SHA1

0dc060f707e9d2043de3c2f671c6eb83b9bc9369
SHA256

01e6058b3210c683355660b4c1eae9c1527e29ff8dad51a4037ef3374df1568c
SHA512

577618a6f740cee6054f0695ce3c7492386cea20bfc378a454d88feec2e8bf5f43ac274356272600c7d515172479731346ed7815b5a0968dfcaba397b5818f88
SSDEEP

384:d7vxBAxF2/zGCeptPWaTskIk1qqFjyJ3XY+bmd8hBO8t4F0fKn0MHgrFE:95KsB6c7kIQxUJ3o0mdp8tI/Rg5E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3ccc348e4bd96e767738515eb8fb31c_JaffaCakes118

Files

d3ccc348e4bd96e767738515eb8fb31c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

Size: 11KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.spack
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RCryptor
Size: 98B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ