d70c68da3f86a76fb2e21c81f1f0eb32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d70c68da3f86a76fb2e21c81f1f0eb32_JaffaCakes118
Size

833KB
MD5

d70c68da3f86a76fb2e21c81f1f0eb32
SHA1

f6674dc7c292b5d87b9f6f88dc9d884601005f1a
SHA256

da14d9dede3b7b7642aae3d3b27990b9c6568a79eaa2255d0c641fc35c32f3c5
SHA512

cc61bfd386c956a1c01a3595507dac8e784f51729756a9b1d9b4d6e76ec9e5b0661f1fdab55580bde6a6af4d3d66e33e63d7be87b404cf43847fa8f759f8dd90
SSDEEP

24576:0f+3jWTQcLthkV8iQlqbcCLu82fLzn4Bbz:4pbMhQIbcx/fHqz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d70c68da3f86a76fb2e21c81f1f0eb32_JaffaCakes118

Files

d70c68da3f86a76fb2e21c81f1f0eb32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 694KB - Virtual size: 694KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ