da83c9efc01f23024d98a7863fe643aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da83c9efc01f23024d98a7863fe643aa_JaffaCakes118
Size

2.6MB
MD5

da83c9efc01f23024d98a7863fe643aa
SHA1

8171375e08ff807f4244561761422b723f0bda58
SHA256

2f1ebab9514e6f3c930a9e726f8411806ddd41fe6aeaaa0575607cbf1feedd5b
SHA512

27246014d6f4c0abf3d8e3d8d5cbaeb040ff537eec84a6b236a88db64a2478fe4defddd813cc41c22fd275790babca270f01823c14ac22f01ebac16b955fd3d5
SSDEEP

24576:IBoyQv4D1p5qLEKpzqZVPrZkZU0WSBmSmMuRosT4tziZPhTT9l/Q71dxLrIUy5hs:L3v45AETI/WSISmpmziTRU8bcWJY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da83c9efc01f23024d98a7863fe643aa_JaffaCakes118

Files

da83c9efc01f23024d98a7863fe643aa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ