d6e31468036c4d37a42b60dbf0480dc1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6e31468036c4d37a42b60dbf0480dc1_JaffaCakes118
Size

78KB
MD5

d6e31468036c4d37a42b60dbf0480dc1
SHA1

41aaf7c0591b2f5e7b417e5c820446be103bbda3
SHA256

0a8433c0e2481c0bc43e81eb6502b518681ccf22f6febd36628bd9ac38820563
SHA512

894809a2adaa4416d08a0c2c6816f0e5e737f33fe838cdaac65778fa1d474f8daa0a2ed87bdd2368166c46d85c5d069fac384cdf2c7c358e5ecb754d15ddc5d7
SSDEEP

1536:dWZ1g3b643KoDNezzfHPJkHwCNsCxbYBSBzBYor:wE1C3fBk1NPxUwZSor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6e31468036c4d37a42b60dbf0480dc1_JaffaCakes118

Files

d6e31468036c4d37a42b60dbf0480dc1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ