dc025768f91e8d6472f60fae44f70e77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc025768f91e8d6472f60fae44f70e77_JaffaCakes118
Size

1.4MB
MD5

dc025768f91e8d6472f60fae44f70e77
SHA1

a1d2225543e56e597a38863f4cf06e02903c12f2
SHA256

8c65a62435d6a4164d2680caba47e2cb1c0461887f3adbf1b1771606ccce5dbe
SHA512

98996dbdb1d34028c6ec58f598ac33664da8bb205419f46de471887d58c153f6b5a3fbe4dfe0d90e2388002ed9a81ef29584a6a0641f385d7ddaef35fefa969f
SSDEEP

12288:1eWUKxVW25vqc74uFifB81Tw/4gqWt1GlZ1Glg1GlL1Glw1GlN:Uhd25vi2C5D1G71Gi1GV1G+1GP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc025768f91e8d6472f60fae44f70e77_JaffaCakes118

Files

dc025768f91e8d6472f60fae44f70e77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 477KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 868KB - Virtual size: 868KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ