dcf337a4a2bb5953f7d3cf71c4005e8a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcf337a4a2bb5953f7d3cf71c4005e8a_JaffaCakes118
Size

53KB
MD5

dcf337a4a2bb5953f7d3cf71c4005e8a
SHA1

2b6afdd1481e1b1897aa79c21468c25eb3a6e199
SHA256

5cb6fd4d83652a9c7a7c327e0a7d9d410d28553daa052a88f9a0e36e406366a5
SHA512

ce268c7db0e170e28fb18baa5bc3e58f0204436051bdaf873d3254ce5ba9fc900544e5b1c9aa1f186096fdc8bcb9ac26d59046df8d023820e565a044196c03e5
SSDEEP

768:lIlrRzNIFZ25oPozuWQVdoq0fKS9CMv/ytTPRUX/zaXqTq6hFLVdrAOOfKxqnKGh:l0IFZ2xzTmdotv14TP+LaXWrrok4Kt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcf337a4a2bb5953f7d3cf71c4005e8a_JaffaCakes118

Files

dcf337a4a2bb5953f7d3cf71c4005e8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ