dab64877022e72d4ad6542ccb7919bf1_JaffaCakes118 | Triage

Sharing

General

Target

dab64877022e72d4ad6542ccb7919bf1_JaffaCakes118
Size

420KB
MD5

dab64877022e72d4ad6542ccb7919bf1
SHA1

d013d6d059703087889f1f3118afba916fc2a160
SHA256

9337dda21d230800db915fe910ef0a33a09fb42da7acfe2392a3c6c31f3e4d43
SHA512

ebb5db658d2bc1fb59a855b38cc75b01d8ca9bd05f7bc7e3ff95af8dd0b1293615578d0889a0521018dbd429217aa8e4252d95bbf5ead2edbddf97530021740b
SSDEEP

768:Vj3Ftwy/K5f52c+9NlDCFuJKulMe/FPDqeFiRsXufGfeQ+hyshfZxwGlHL9Kx0lw:Vpt1/g8bD5tPeo+AQ359Kx8118H/9GS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dab64877022e72d4ad6542ccb7919bf1_JaffaCakes118

Files

dab64877022e72d4ad6542ccb7919bf1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

bSs
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.EdATa
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.COde
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cOde
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rData
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

data
Size: 11B - Virtual size: 11B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rElOc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ