d47ff264efd71fb75ab5dcaf083fe6a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d47ff264efd71fb75ab5dcaf083fe6a0_JaffaCakes118
Size

526KB
MD5

d47ff264efd71fb75ab5dcaf083fe6a0
SHA1

5ae7a045ac2957628764ed879bb0b20ac65c63f8
SHA256

332909a55724370da102c9129baf34bbb1abb6d5dda8b921a29337a84b36236e
SHA512

1daa997f6ec8443ce8a364d7b6d7e5f7bc5db79fe99b458212f6453b290b4b515a6b8eb7776c4d503ae88a5da3944278805642d7b3e722e5d1aefb303c194993
SSDEEP

6144:VnFfE6D+gnxnIZoZ/222SDNWzjxM8BoXzN3NShHoeX25481eRjnjsR4UvpDlK7w7:jzD+gtIZoJ2Jy8+jN3k2y81+jIRdp8o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d47ff264efd71fb75ab5dcaf083fe6a0_JaffaCakes118

Files

d47ff264efd71fb75ab5dcaf083fe6a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 446KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 101KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ