dd3086758fc065d094e1d83af00ffc12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd3086758fc065d094e1d83af00ffc12_JaffaCakes118
Size

368KB
MD5

dd3086758fc065d094e1d83af00ffc12
SHA1

149f03a437fa8732ab90252b4cb995922a5d5ec4
SHA256

1893e418ec7b1788e93ab098e3272bdb46543ab81e2fea786f62fe605070a369
SHA512

53ea87e0843fd82a907f994c84e50d25894990eebdc460af1ab1b56f97c7dee8e959dbc34ebc23385e1c3a5b4e9c0bebf8bf008a34db7139aedd5014a666c61e
SSDEEP

6144:D3XnKgMrosdKypGgvt06nfCiMt7h4hc9vLK5hCFn2AhrzXJOawiLG:jXKvUyxZtfKiWSK9vLK5hCFVhrzZOawj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd3086758fc065d094e1d83af00ffc12_JaffaCakes118

Files

dd3086758fc065d094e1d83af00ffc12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ehlk
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE