d3f7f3f285a015fd8e62622ccb13f649_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3f7f3f285a015fd8e62622ccb13f649_JaffaCakes118
Size

955KB
MD5

d3f7f3f285a015fd8e62622ccb13f649
SHA1

5a20736fccb0f808577dec6f74e5fbc19870ee65
SHA256

930dafcc3cc84c7c0785ca6fff3212ece9fc36b0a0657e06811a98abdc9546bb
SHA512

b18b1836c7d117e576d31a007b891ce4194f5a85c04e25f5847676836e5693d015fe63e47975d767f8f70cc358f7949c196bc490e6ef4605bf19e31e69829019
SSDEEP

12288:aft1+/+rHM5/at3mB6G3Lz3yFDVlkm/CLmQVNf7X1GiIqizOzgtCQHb1cEaEztjJ:7ximB6G7GVlg7Nz17IbOEtCQ1BjRL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3f7f3f285a015fd8e62622ccb13f649_JaffaCakes118

Files

d3f7f3f285a015fd8e62622ccb13f649_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.txt2
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 329KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 194KB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ