d667ee136336e22f6adf5ab94932617f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d667ee136336e22f6adf5ab94932617f_JaffaCakes118
Size

837KB
MD5

d667ee136336e22f6adf5ab94932617f
SHA1

062ddb3c29a0e4395808ad59be8a2b3b543161cf
SHA256

ea56ff9786c76f5515155a7a157e046558349b4eb03c9c0a339da6597511ea91
SHA512

0971f201da89b629984e4a9e978778755afa4a061992c0deae075a87d135fd4aa3b902f766922ac3da1d3c53c7235009ecbcbfff99421b14840308055e003899
SSDEEP

24576:eekO9PBvmYRD/9eb5+B7dWKsmTHeC5Usm:es3ugDQb5SoKxBm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d667ee136336e22f6adf5ab94932617f_JaffaCakes118

Files

d667ee136336e22f6adf5ab94932617f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

Fjusdidu
Guasdidii

Sections

.text
Size: 353KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 1024B - Virtual size: 819B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 126KB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.datow
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ