da586bdd970831a5436294237cc169ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da586bdd970831a5436294237cc169ac_JaffaCakes118
Size

25KB
MD5

da586bdd970831a5436294237cc169ac
SHA1

b62d79b98bb4eb3cea12ccf80ca763715e7cf837
SHA256

15dc8d7cafdf2d87be28a81b6003f1faf7e039c7d490036bd1aac3d30b682357
SHA512

14e4a729d26c97b7809f43ab6aa05b347b6fc5d20e2fa8be0c8d03c6bf69a9e4b210d1d73fef0fd42806815f1067f9bf63d6e541a0ca2aca5f03deffabb2edc0
SSDEEP

768:kGNKzyLmJnHyAtKzCIFtZ+C0V+0WXSuAU63:dNIy+nHgz3/ZHXSuE3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da586bdd970831a5436294237cc169ac_JaffaCakes118

Files

da586bdd970831a5436294237cc169ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

PEp0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PEp1
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

edata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE