dc83d2fe0cfa787633c60fd9faac02d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc83d2fe0cfa787633c60fd9faac02d5_JaffaCakes118
Size

191KB
MD5

dc83d2fe0cfa787633c60fd9faac02d5
SHA1

aa511fe02496b1339b70be5d49ac18c47f7ef0ad
SHA256

53c0ee03a2f6d49e70bd88426fb33472633d1b4b3e7a1dc6ef1d711915725cbf
SHA512

d22ceec089d03bd4bba8ded0b19f5616449cfdebf38383178d22be1e44df548a6cbbd8305b7e9deb46633c2c7463a2316638064a7d2b4c8e3155e0554e3ec7a4
SSDEEP

3072:+DSoHy7ybh6gsiHhOlrq+yTrAHWlrTUwnh:6SCy7MhOlW+UrRlrTUU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc83d2fe0cfa787633c60fd9faac02d5_JaffaCakes118

Files

dc83d2fe0cfa787633c60fd9faac02d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 336KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ