d6c8d1e4cb34f25ac6cc38cc98b7dfce_JaffaCakes118 | Triage

Sharing

General

Target

d6c8d1e4cb34f25ac6cc38cc98b7dfce_JaffaCakes118
Size

1.8MB
MD5

d6c8d1e4cb34f25ac6cc38cc98b7dfce
SHA1

2602b4cd70df02e7cd28e405575ed39711606450
SHA256

53d65c76e290cfca9623ae881df6071b5bb67ac4cedc21e57d46ce24ba302e7e
SHA512

a16d7af7927e5b3432c8168aa103b0c8e938618b17c993cc8ee7be655e20cb4d505dadf2df773b20450dc5111d3a41a20a9482e18bbdaedc11b45441378e8a3a
SSDEEP

24576:eqmyxUEcYMhbpRxs6PZwfplaQmjD4dmz1YlztyWc9xew3Ci17jAlj0:ePxDRW2wBmYdmzItyW87yi1g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6c8d1e4cb34f25ac6cc38cc98b7dfce_JaffaCakes118

Files

d6c8d1e4cb34f25ac6cc38cc98b7dfce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 487KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ