dc99c52a901604c06fbaf6d82ee9d201_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc99c52a901604c06fbaf6d82ee9d201_JaffaCakes118
Size

226KB
MD5

dc99c52a901604c06fbaf6d82ee9d201
SHA1

0d7d8633c24fbb9e2c328297a9d1cbf45c1a7c06
SHA256

f8c6756aa0800b4a5dc85a015f8b3fcf59efd8a21f2827ea6976ed3d9a8c3f96
SHA512

408c25cc4102ede505c0476185a71aa0c28b38b6915675383acd88b72147d972d9e74281d7db015226c6a5f273e94426ba5754bfc6dd6a7c5a6d3eaddefab03c
SSDEEP

3072:F02+jVVRfIp7+EndFSS55Lx+7EEkvHNzG7A/nN5FX4wTvxmavJBYo/549P09Z7:a2dpCEn/SS5z+7ERvHN3/NRVRBYoOP0H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc99c52a901604c06fbaf6d82ee9d201_JaffaCakes118

Files

dc99c52a901604c06fbaf6d82ee9d201_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

0
Size: 138KB - Virtual size: 612KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 50KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: 9KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE