d6483b72a55caa4ef287502d9168fe5a_JaffaCakes118 | Triage

Sharing

General

Target

d6483b72a55caa4ef287502d9168fe5a_JaffaCakes118
Size

309KB
MD5

d6483b72a55caa4ef287502d9168fe5a
SHA1

021ce23ae4aa4419ca2f72fce905b4600f00b79a
SHA256

5883235de45a06c2b1fd62ce271ddbdded1be126d8caefdd32feb8d47010bdc8
SHA512

9113b985a45079bd9a0468026bfc95f4231c07eeaea1879cc090dc91b8959c956beb3b64141cc2ae290899a73e3a12ed01be1e92f46bc0c7d48a7b6fa0176a79
SSDEEP

6144:FB5R3DUGAqefs5GcwAG3obfu4GPpB6HJXwi42pU9lJd+:hRzUleGcwA2otHpXhw9Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6483b72a55caa4ef287502d9168fe5a_JaffaCakes118

Files

d6483b72a55caa4ef287502d9168fe5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\src\upgrdhlp\upgrdhlp.pdb

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wtq
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE