da69e2b4e6c4a8b97fd33d5b2a029ab2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da69e2b4e6c4a8b97fd33d5b2a029ab2_JaffaCakes118
Size

589KB
MD5

da69e2b4e6c4a8b97fd33d5b2a029ab2
SHA1

8871802698da61ec1c091795fbd966a9ec36e4db
SHA256

bf30fbfa8f53365ab473b31fb38551b3541334745aefbae0f143091e50e6f74e
SHA512

d8f88d4ec725a92c2dd71b0f552b09c41fc813406603d69054be472c04e43b6bdc397197c1bdbb2b84fe2b1b0a351981cccc1137e4df38fe10c0583e07862529
SSDEEP

12288:m5ADWhNtdwZWQmAmPef9PVGNE8AkdgZaxSr2eyW1evfml/:m52kNpQmAmIDGLjoGPeyWAvfml

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da69e2b4e6c4a8b97fd33d5b2a029ab2_JaffaCakes118

Files

da69e2b4e6c4a8b97fd33d5b2a029ab2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 508KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ