dd59e774077f678b4a81a7cfbe76639a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd59e774077f678b4a81a7cfbe76639a_JaffaCakes118
Size

116KB
MD5

dd59e774077f678b4a81a7cfbe76639a
SHA1

98ff458196af9931b43fc3224c01ac25a2ff726f
SHA256

5a02bdeb12ccde339135f0e382dd9f6682636a95d23740659f0063def6f59d82
SHA512

e9c48564a984bd9f6ccb7325423d091a17e9aed4379a529d42c45fca33259a033a2ddd2f85f0fe92e8675f52aada3e45f14a8f2813b497203d5b32a8940682ed
SSDEEP

3072:UYrNWKtV2dBAgaKSBgKJbTSalGf/nJMzbhySpIFOJtxSyHmGp:LXtV2LAzKsgAxlGZEb8SpIFOnxSyG2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd59e774077f678b4a81a7cfbe76639a_JaffaCakes118

Files

dd59e774077f678b4a81a7cfbe76639a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

nulo
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nulo
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 255B - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dnulo
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nnulo
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nulo
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ