d74771bab33d00fc70f68dda7a32bdcb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d74771bab33d00fc70f68dda7a32bdcb_JaffaCakes118
Size

368KB
MD5

d74771bab33d00fc70f68dda7a32bdcb
SHA1

4fc2c4df4548c7102411c75cfbfa569a9ce05ca1
SHA256

54d9e2a72e8dc6317606d353ecb877c5ec03968823b97eb3529e97650f20a09a
SHA512

9293046b9edf6fccd0998daf2fad32078c83761ee95606da5e7c1245ef3b03b5379a1da09b60aa236c923c474a642d574493121fc223c808b4e91b28a10f5670
SSDEEP

6144:nPv3FwmnTTcyX4v6OmGxUcmrMxlgj9HHGubQ/6XYOYpzZHoBtVMD1l:Pv1wmnTwyXOjmQmj9nxeOmzloBMDT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d74771bab33d00fc70f68dda7a32bdcb_JaffaCakes118

Files

d74771bab33d00fc70f68dda7a32bdcb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ