dd1a7f76ea1418421114ccc3a7f8a5b9_JaffaCakes118 | Triage

Sharing

General

Target

dd1a7f76ea1418421114ccc3a7f8a5b9_JaffaCakes118
Size

466KB
MD5

dd1a7f76ea1418421114ccc3a7f8a5b9
SHA1

a37db8c14c02b28ecfd89356e8e91a5b05328c87
SHA256

561828ca9ac32de97beb5ae87b7f1561c450a5895e38c67621e87636b8223b95
SHA512

33b0237f3082bbbc558c0affcb6cf2e6cfeb5888ecdb93224bb2fe858358b740b90cb898321654bb3836ed2d50868f36589a67b03668f735ca50429783969f06
SSDEEP

12288:qs1aPWnsXWDvPMy8UZcBi1LDNiWFKqnwvyi2ATwUPQlv:JNnsGNS4vNDFKqUyUTd4lv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd1a7f76ea1418421114ccc3a7f8a5b9_JaffaCakes118

Files

dd1a7f76ea1418421114ccc3a7f8a5b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 773.0MB

.hnnpgg
Size: 448KB - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ