df0f303c316dbf7676d18b1e130dd2f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df0f303c316dbf7676d18b1e130dd2f4_JaffaCakes118
Size

515KB
MD5

df0f303c316dbf7676d18b1e130dd2f4
SHA1

6741e24762094cf8884b25cc13e804b64753ed3c
SHA256

814e84591e4013bc8179484d015c8baaa0c9bced3128145186ec77ce064519db
SHA512

329f80e39da3161b475d83cf5984c51554a0259e82d4ff84ee72f907024e48a8e57b463fa65468d69f55f1684dd44f8587abd0453e088a08909e457f1b3133a6
SSDEEP

12288:Kvc3vDO4yyKx+QoWtejrlMiz/p4McmloeCPp3Yla9zQuwG4bLiHxS6kxeri80k7D:KvyDO1x+Qocr2oo8ES6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df0f303c316dbf7676d18b1e130dd2f4_JaffaCakes118

Files

df0f303c316dbf7676d18b1e130dd2f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 337KB - Virtual size: 337KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ