df19fb8d135fa3a2b3aa6f0abc8a9649_JaffaCakes118 | Triage

Sharing

General

Target

df19fb8d135fa3a2b3aa6f0abc8a9649_JaffaCakes118
Size

1.2MB
MD5

df19fb8d135fa3a2b3aa6f0abc8a9649
SHA1

89d1c740bad518c708106bf96622db99dd41aa20
SHA256

43a442fcc4551231165961c4123ae10ecfa2a982e0bbd2cd66b7caf2628333b4
SHA512

eae07b8134c257587b5ec14064c2da8164c2c9c7815cb4e393ecbc267289d24facccef49858769d3e9ac8a6af29d39414e5130eb26cf8412dd18b982b9e25a45
SSDEEP

24576:yhg75jy/Hn8p5NnshhvHn+OGEpNXLlcdSdbSicIrE15lf9o8+6LcE+zh/JX9:yhcOHn8p5qhhveOlpNLlcnWGXCLzhj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df19fb8d135fa3a2b3aa6f0abc8a9649_JaffaCakes118

Files

df19fb8d135fa3a2b3aa6f0abc8a9649_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Jc
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE