da156119a3ef718946764e28420919e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da156119a3ef718946764e28420919e5_JaffaCakes118
Size

525KB
MD5

da156119a3ef718946764e28420919e5
SHA1

0d76c5124cedf03357b3cfa5c0c707d62e43ce30
SHA256

0b9ec9e9a962397de8ab59abe76c3937f16b7f6f81ec22955b98f00bd5198ffd
SHA512

56c356c28b835782d6a64f5373247c4455bfc558bd77b00fa79bdae3fa32a0441598b199a06d6bb1e50cb539bbcb62e972130d98d91605e02a264bf07727a7e9
SSDEEP

6144:nu91O8TXgTTSjvvfH+sfeD6ucHpwRhbvHUAthjCO:nuETivGsmWbuRVvHlhj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da156119a3ef718946764e28420919e5_JaffaCakes118

Files

da156119a3ef718946764e28420919e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

AcroRd32Exe.pdb

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.mjg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE