dc39e6695bfb5e74f7408e5845a20b6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc39e6695bfb5e74f7408e5845a20b6e_JaffaCakes118
Size

507KB
MD5

dc39e6695bfb5e74f7408e5845a20b6e
SHA1

89b68029c765c20ed7e2cd1e27353cb7019c29aa
SHA256

a4ead1b9250bffb6824d89bf073e397ac0b2de2755d4d998f4ff661b6eb558ad
SHA512

bb7c03a79c60d510c8c9e2bd5799d1fa1d593efa92bdb90067e20225ad4f54d6f68f97034390555303ef880663e64d8e8b007653c44cb1898b9727a0533b70c5
SSDEEP

6144:W3BgalfSwK9VG0ZzxM+nFjhOG6V4bpuMsAcFlL8omeSt/PC1F7OGB8Eli4HMK:+BgalfSJYGxMKBUMLcF96mF7mKtR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc39e6695bfb5e74f7408e5845a20b6e_JaffaCakes118

Files

dc39e6695bfb5e74f7408e5845a20b6e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 406KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ