da754da1f33b7f74c76e90d86a78a67e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da754da1f33b7f74c76e90d86a78a67e_JaffaCakes118
Size

645KB
MD5

da754da1f33b7f74c76e90d86a78a67e
SHA1

b642897915a2515647a7f24bb577e54c2179051a
SHA256

a987649dfe47664a3099c13597bf01b0e8b6dbb991412b4fd2b0b2abf1b7f970
SHA512

6e95f1068b651b029d8c285703276d4508b9369cfb44fa9eaf35b475f2a78ce6ff457860eb44cefdee0c70200a04ba668deeb8f70d03fe9f2ccc34e1c19baf67
SSDEEP

12288:VHL+S+MqzvgZfwZNuXYUnmTcOVVcwVr9zxPAMqmyh3:FSmuXZNnl9VtZ9Bqj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da754da1f33b7f74c76e90d86a78a67e_JaffaCakes118

Files

da754da1f33b7f74c76e90d86a78a67e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 429KB - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ