dcb77c3c2ded0a5f19e5627977599c01_JaffaCakes118 | Triage

Sharing

General

Target

dcb77c3c2ded0a5f19e5627977599c01_JaffaCakes118
Size

116KB
MD5

dcb77c3c2ded0a5f19e5627977599c01
SHA1

89b8095df6355c7c71edc2591d59435a7497d00c
SHA256

41dac313f7aedd732bfd3797e12d5cfe48a506bf97cdd327665874bf4097d73d
SHA512

ab4a9e179a9073dd90c380e61ae553321178893992fe14936a0e79ab6d835374c460672b35bc3732fc3717313205afc09d0a90cf912a3c730253ba6184ed5f34
SSDEEP

1536:9bqBQiRBxl5EzcBK/ev3/n/MTDbjxuoqY2Q4vGRKGUOmrSm/Zx8LFLTTHqm:cbRBxl5NBD/ajx12NvGcGKVBx4Np

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcb77c3c2ded0a5f19e5627977599c01_JaffaCakes118

Files

dcb77c3c2ded0a5f19e5627977599c01_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 52KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ