d64f125fd950d385075fe1bdbe474cde_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d64f125fd950d385075fe1bdbe474cde_JaffaCakes118
Size

587KB
MD5

d64f125fd950d385075fe1bdbe474cde
SHA1

5ceeabafa299a12decfc3cf7ce196a163717721d
SHA256

8257ad2306e649ba6fb7dbe656363283aac720e931aa1707252a7f31e7c4a23b
SHA512

73d8439a78304af117586e2fd2db82cb2382c4748b2acb3c4c9964e2adc01bd21a959ab8f62ae6d867417294b252b166377c1fc35d9010fb6a5cf5830322e316
SSDEEP

12288:cwdH5gvFT0u6VvsCoQ3mEGYTLjQ+UvVCVX/uAB:VJY6VU63eiUvVCX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d64f125fd950d385075fe1bdbe474cde_JaffaCakes118

Files

d64f125fd950d385075fe1bdbe474cde_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 58KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ