da15bf281538f97e64f5058b86ab7945_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da15bf281538f97e64f5058b86ab7945_JaffaCakes118
Size

77KB
MD5

da15bf281538f97e64f5058b86ab7945
SHA1

230889f00f25271439d0ba290e777f8a131abbf1
SHA256

89bbad0bbc51825aa8548b82f51a1c49468843b912ada9498da9604cafa77d55
SHA512

d7c0236f902bd7969d81b2cbd6e42f467e6a3537fe9bd0889c8d0de64eb9be98886927f9274f8a82cadd501afc5f8be6b9ded33064437a096fac92d66abdbd7f
SSDEEP

1536:rK3dguvpTGw8yQAW2Eo1gO/4CzZccPjRlaXA7qKRSz9BE4te/w:rK3dXBT2yQAPV5WcPjlqKRSz9Uw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da15bf281538f97e64f5058b86ab7945_JaffaCakes118

Files

da15bf281538f97e64f5058b86ab7945_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 289B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ