d72acc57c98f2c582a6281211dd2e32c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d72acc57c98f2c582a6281211dd2e32c_JaffaCakes118
Size

391KB
MD5

d72acc57c98f2c582a6281211dd2e32c
SHA1

4d80eae81101f3256532857ae65489f7b1307b34
SHA256

e4a6895ac0b200f039e2c32ceab33181a9d3c68d48600c691e0932aa0f63e34f
SHA512

102fb30ec0b882167262107458a2aa3449f4a6e0a4ae67ffccb79eac69e1ae043d56ff3c577692278f1f36997102d71a37624eb8a9245d660b36259b764598b3
SSDEEP

6144:GwWbiEQuxAnDiLQGQnhwuhCdsnk1B09xZxbVSgo2Icc5HJgD5fgevl6:GivuxyDeQGQhwIA1BsZxbUvOD54q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d72acc57c98f2c582a6281211dd2e32c_JaffaCakes118

Files

d72acc57c98f2c582a6281211dd2e32c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ