d99c672a61730d2579d91bbad95a6270_JaffaCakes118 | Triage

Sharing

General

Target

d99c672a61730d2579d91bbad95a6270_JaffaCakes118
Size

440KB
MD5

d99c672a61730d2579d91bbad95a6270
SHA1

e61c7d6be3ce6a70a88a5bbe1c3883476d5acda0
SHA256

7c893f750dcf3a49b7abfaebc71920b9e11c3fa7f980ec3d714fb856e48b9965
SHA512

4fbabe8871db1db28bb802022b33d18e9a4200c87f6a7c9db3d72a8c197c28d2a7b92ce690f519f4284f4cbc5b6526cb9a5a661487824fb0f11c6d89060a3443
SSDEEP

12288:FZyzzDqm8urolvFeGxQBf4qZ2Yu02DNmHuoRgU:yDqm8urCxQB+xxpju5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d99c672a61730d2579d91bbad95a6270_JaffaCakes118

Files

d99c672a61730d2579d91bbad95a6270_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.3glm6x
Size: 1KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iryl3a
Size: - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rtss
Size: - Virtual size: 3.0MB

.edata
Size: - Virtual size: 424KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 433KB - Virtual size: 436KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE