d4aaeb8f3c8b6489806d7fd89b04dee1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4aaeb8f3c8b6489806d7fd89b04dee1_JaffaCakes118
Size

367KB
MD5

d4aaeb8f3c8b6489806d7fd89b04dee1
SHA1

03152a6465455fe7213b468170046a48d6334acb
SHA256

f4b6267e827865fc9b33c56680796df583ac1d0edbddeae31b519660e8a423b2
SHA512

f458503dab1417530f01a7880beafb4bfb37c03b3620375d60164d25450135fa80dd7ebe1514d29db3e67d73dc8035533c90a8a6350d920e6e7f573e0c522364
SSDEEP

6144:ibX9XjXlb6K9z2MrvVm6jDZik0wfcsf2ee1Y+QWmikCv9Umu7tEWl:SX1jXlb6KYUXDok5fHe1m5ikk3StE8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4aaeb8f3c8b6489806d7fd89b04dee1_JaffaCakes118

Files

d4aaeb8f3c8b6489806d7fd89b04dee1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ