daa86dafa8dc088cf8524dadcc44c72e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

daa86dafa8dc088cf8524dadcc44c72e_JaffaCakes118
Size

1.0MB
MD5

daa86dafa8dc088cf8524dadcc44c72e
SHA1

2271023edabeae6809fb04fe53919ebfa63e11bd
SHA256

e85bdbe39ffed1c12e4ac59cc77326cf3ed2428c0d735430411de8df4f52c7cf
SHA512

1673708c4518100ec88973671e5dba99042681b4e0d9bac1d7f376a411068d130689705dbf0353d77d3522ea582a37191e85d68fc2b9bf8513666a64182b3d84
SSDEEP

24576:8rL+W2G79D6U25p5ypF4wVv0IrKxVM1eHUstayGvQTqaLkBYC8hE:8r6W7cUIp5ypF4G2xVM1ITzLkBYC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daa86dafa8dc088cf8524dadcc44c72e_JaffaCakes118

Files

daa86dafa8dc088cf8524dadcc44c72e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 786KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ