df03d9b86ca216a1b671bb7418953ab4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df03d9b86ca216a1b671bb7418953ab4_JaffaCakes118
Size

507KB
MD5

df03d9b86ca216a1b671bb7418953ab4
SHA1

c92576227512c7715dbedd707a10cca69ad748d7
SHA256

394b9da26c940548cbfcad64732574da7120f565290d18e7d502ac8b71e1ed07
SHA512

b474660d27bac24a2462bf6c0b133c7b243b08cd5a750f1c7834e307cf47159aaaffde021c21cd3bd2b28a5c7a2b957c57ff2584b41a9dfe89f308f8941c5799
SSDEEP

6144:MtF4M2UIKeN5rqxSTvBsyqBVJISGqLD1FvHZe/owGvDQ73TaU5GaKyPjtZATy1:VfzTa/BVJISJD1FvZwowGvc73TaWnA6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df03d9b86ca216a1b671bb7418953ab4_JaffaCakes118

Files

df03d9b86ca216a1b671bb7418953ab4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ