da56cc6ccf827c9c4a7bc645753efc64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da56cc6ccf827c9c4a7bc645753efc64_JaffaCakes118
Size

3.1MB
MD5

da56cc6ccf827c9c4a7bc645753efc64
SHA1

bc1f5277bcd356e3229bc2fd2a8c4302c422d7ca
SHA256

44ac2e296bc3f4d65f5d551468c04bc5892538282f0ed9971061dd407006660f
SHA512

18699ee299f7a9aac34603a61b9e0d19f0730b849ceebf5660e5eb9124da0ef5dd8f9b24f5d74e75305aee81cdc926f44cb53345159510220589ffea93ef246f
SSDEEP

24576:WL69HiIC60SNTze/bj8NYbVYnoXx8hgGb+HqTwX2CAHxF9v8ms:ji80Stze/bjPYss7qcC8h9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da56cc6ccf827c9c4a7bc645753efc64_JaffaCakes118

Files

da56cc6ccf827c9c4a7bc645753efc64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 316KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Winxp
Size: 2.8MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE