d60e1d110523eae82cb1c7c125f883fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d60e1d110523eae82cb1c7c125f883fb_JaffaCakes118
Size

1002KB
MD5

d60e1d110523eae82cb1c7c125f883fb
SHA1

43ce3ca07bde6ee2076a5426e490a5f6c33db274
SHA256

65f055db18c509f8500cac0f6d65e08f0726e806f0c24c025ee7749f3ad7b8ea
SHA512

5271b27ff683dade65ddf229184ce0983aef3a8657b9bd4fd3d7e37420dc4169d39ec8a6d02705d197ef86db643da832317a04ef41e5e97cf35079d9b4846cd9
SSDEEP

12288:1yOjVcCbOCBxHSbLhm2r6UOvpt7FAHk7eRXJJ8FmTJcUU53zC+yoIIstRU5YHT05:1HVc2BZVvpt7sOHuFRDC0ZU+BtQIPyrh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d60e1d110523eae82cb1c7c125f883fb_JaffaCakes118

Files

d60e1d110523eae82cb1c7c125f883fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 994KB - Virtual size: 996KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 620B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ