d69f48e06afed90e15b161f30ceed02f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d69f48e06afed90e15b161f30ceed02f_JaffaCakes118
Size

414KB
MD5

d69f48e06afed90e15b161f30ceed02f
SHA1

2b95b1c03f7a659632ab6428cf83b4a6b5dc4559
SHA256

d29c126bae820f073e73c96a30268f54766f20907276f949004d9ef44e4eccd5
SHA512

6cd935389b3d12b5177aac7e62008813af862d033e1edcd42a5e92ad2032b80305406318203f2ba7b2cea91725822c9af3e8b9daadecc9fa98ee431c15073d3c
SSDEEP

6144:lZwLKGGO950KKgWr3iKiTcNl5uWlKKuwYXrFNt6z1jBgFI2z2SyjZF:lUKGGOExizcNTuWlPvWpNY1S22z2hjZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d69f48e06afed90e15b161f30ceed02f_JaffaCakes118

Files

d69f48e06afed90e15b161f30ceed02f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: - Virtual size: 960KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE