dc4aacf8467b4f39f22b9857cb3d601b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc4aacf8467b4f39f22b9857cb3d601b_JaffaCakes118
Size

618KB
MD5

dc4aacf8467b4f39f22b9857cb3d601b
SHA1

d7908ce1546723717298b9ba3d8b1ca7937fb62e
SHA256

3e76f9716620bcde0351851d5f1a4feb60e525c0d3afb94d49d603a0c201d809
SHA512

3aa6d1d308f5ec0c1439409abc182845feb21006284968fe425b05be7957f080b2f1f6e4c5007342e5616e87b89c1a35a22520efb52deac94de74da3774fd652
SSDEEP

12288:a4zZ6RP4Ouamvz9MlxR6FY2ypfUxvJV5PwTD+lPz7XeMGbGto+:dZ6RP4zvx7YNpfUxvJVGTurxGw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc4aacf8467b4f39f22b9857cb3d601b_JaffaCakes118

Files

dc4aacf8467b4f39f22b9857cb3d601b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.CODE
Size: 6KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.const
Size: 599KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ