dd3bfaca0f83a7b0db7aeddafcac8117_JaffaCakes118 | Triage

Sharing

General

Target

dd3bfaca0f83a7b0db7aeddafcac8117_JaffaCakes118
Size

194KB
MD5

dd3bfaca0f83a7b0db7aeddafcac8117
SHA1

e837b65f51cf238fcbb6d369c7993e35f7bb5f54
SHA256

2f8cd3e2804e99f25e390b11e2a232f0c27457f357270fc0848f8f3532b59c0a
SHA512

46c43ee7076c548f28e08b75c2814c09839af199388b8be3eec424014914b025f326d5942b29356873a794b2a8bf21ced98c28fe50a183a4304dd631c40bb2eb
SSDEEP

6144:GlXiSE12RmT8D77/53WiORGqwzinZS/ikrU:+XiSE1em0JPSqzinZSNrU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd3bfaca0f83a7b0db7aeddafcac8117_JaffaCakes118

Files

dd3bfaca0f83a7b0db7aeddafcac8117_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 750KB - Virtual size: 749KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ