dd1269fd449e550ee5b1b79c4a6dbcac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd1269fd449e550ee5b1b79c4a6dbcac_JaffaCakes118
Size

760KB
MD5

dd1269fd449e550ee5b1b79c4a6dbcac
SHA1

64d94c51c89d806bca2d6f85b2ca1bdcdb9e3973
SHA256

67d6a5ef578402f432c59e1783a3f9bafdbabefe5bd673289a48acf52d5753c1
SHA512

6b089ad2d86da4058c0cc6f8b03010d5a63f8798bd73e7a4cd403ad19515fdd29c4cd86a58c7150ca20c21e8abc7ef3bfe7f79c5d104e01441739444fd67509f
SSDEEP

12288:TiFRsqSL4xjW1SsSnDBD45M0JeNS7LxhK1gA6TjmOvb1IvuiOj3pPhPwwWFNu:GFiqSL4xuSsWd3nm9hggAPqCvu/5qwKo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd1269fd449e550ee5b1b79c4a6dbcac_JaffaCakes118

Files

dd1269fd449e550ee5b1b79c4a6dbcac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.7fglvb
Size: 816B - Virtual size: 1.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.91k0ry
Size: 680KB - Virtual size: 684KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE