d990989e586c672b8f3495a8262474ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d990989e586c672b8f3495a8262474ae_JaffaCakes118
Size

824KB
MD5

d990989e586c672b8f3495a8262474ae
SHA1

4da1f1630378c687dffc84bc0e43f2b60936e8cb
SHA256

91b887d0b0ce5b4f027eb1f34c76474a07d1e0968cc18bf8511fbd7b4be5f2bc
SHA512

5697ed8ba8b89d90a0d80f080f4c0ed20b560c0120a6a6165e5a7a5e303d5499941207fb4ab441cb247bb5151001d4c8bfbe5e6c6d2c8738cf88af41852c40d4
SSDEEP

384:VXi0J+EZ/3k33OAaNsMy8UcPuVl+4QcU0upza3yXQwAqPPVYDoYvgUK4K1KI+GKt:b8i/3M3UFy8gXHUPa3yXQwAak3gp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d990989e586c672b8f3495a8262474ae_JaffaCakes118

Files

d990989e586c672b8f3495a8262474ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 724KB - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ