dad40e4fe539a3a6a02e0c8552b62be2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dad40e4fe539a3a6a02e0c8552b62be2_JaffaCakes118
Size

27KB
MD5

dad40e4fe539a3a6a02e0c8552b62be2
SHA1

8dfc7e9dbdf1307ab174cc020318a73061547a62
SHA256

7b20b5ea957d7cfbfdf25fc7df11a35559a9b16fa03969052a4d5ebe8211d6ba
SHA512

f64781bd0324738a8177eb15fca7cdc8c856904985e5697d9030e070c4687c9adcfad05baa343c09c5d2dc6276111e7a6d758c917e4342bdeaa9f4f50d3ab10a
SSDEEP

768:wNYhwwfUewegaNbeHA0NrSJnFSbpj6ageiORqrvJV:UYPuBXHJg5gbp+agpOR0V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Deposito-192120.exe

Files

dad40e4fe539a3a6a02e0c8552b62be2_JaffaCakes118
.zip
Deposito-192120.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ