d3e14fb0cff72c3c9a5435dfdb842889_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3e14fb0cff72c3c9a5435dfdb842889_JaffaCakes118
Size

646KB
MD5

d3e14fb0cff72c3c9a5435dfdb842889
SHA1

acdeadd56d99e19ddfc57bed55753cfffa94924c
SHA256

19ef94b08c9e2080d2947ae38a11b94d7ea1e55cdd7f0522c795e17c30de1403
SHA512

e4ea200aef851aa1d1d2e85b0c9096b60f5f6e563038e3a6025d894cf8379db2772140ee24029c46cb1a81880785f194cb0474fcbcf5a32eb4ff5ef4551116a7
SSDEEP

12288:YoUxfpvDA4eXpthazvSX8aR0hoclLL6U3NXLSX+WlLRsNKawfX3cwiRKS:ExfqrXpMbGGllfRSX57sNKd/32H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3e14fb0cff72c3c9a5435dfdb842889_JaffaCakes118

Files

d3e14fb0cff72c3c9a5435dfdb842889_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

text
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

M3
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE