da3ad7f7bf5fe95acb14b0d9dc6e8a09_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da3ad7f7bf5fe95acb14b0d9dc6e8a09_JaffaCakes118
Size

160KB
MD5

da3ad7f7bf5fe95acb14b0d9dc6e8a09
SHA1

d892bf62f2c80841010ad8ed068d2ec6ff5c5641
SHA256

486c6ed65db7bd15ded071b7344c5c57fcb501743a8dd7aee041b9fdc1982f65
SHA512

07aa02485b5b557ab7554e9267ec98c81a346d7face5e8e671e3985dfa954bed958e1972ec141207eb5700d995837cd1c96e0d05574578ff88a7c1be124c7ce1
SSDEEP

3072:xq3dVgu5WaYRPYRcIDMSGbNtulTvdVpQ97XgELWICQpqF0TTeLH956mGmXMna:jVygSGbNtulhVpQ5gECQp0qAWmlXMa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da3ad7f7bf5fe95acb14b0d9dc6e8a09_JaffaCakes118

Files

da3ad7f7bf5fe95acb14b0d9dc6e8a09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 289B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ