dd6d948d8659790baa5d6edb9b65c452_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd6d948d8659790baa5d6edb9b65c452_JaffaCakes118
Size

530KB
MD5

dd6d948d8659790baa5d6edb9b65c452
SHA1

ade4f5066545e9310a4ee1b88adbe380155dcecc
SHA256

dec0eae6a7b0148b92c85e3fc32a352cb35fdf893a5f5b1f17807c718d00403c
SHA512

3304209ab803665d0e33a0da3802a36b885e399122aab083b889de0be844567a8583b408e8c6103d48c19a987b28acf1ce2187d0487b5b7980acf4eed3ce7235
SSDEEP

12288:6+Aj+AMvPky0J/1tRuFgNaMuOhvcy7Dep+PCSJXiM:6eb0/tUSaMhhvBfPUM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd6d948d8659790baa5d6edb9b65c452_JaffaCakes118

Files

dd6d948d8659790baa5d6edb9b65c452_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.scpack
Size: - Virtual size: 504KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 528KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ