dd7692d0a8a618a78463b56cce12df1e_JaffaCakes118 | Triage

Sharing

General

Target

dd7692d0a8a618a78463b56cce12df1e_JaffaCakes118
Size

437KB
MD5

dd7692d0a8a618a78463b56cce12df1e
SHA1

489fe9e5613a93db1d437a4c6f0e58a12bcc4af9
SHA256

c2615f534a1d58715a968b94d64b1fe1279228c9c297e95f7b10db305d51145d
SHA512

23d99fa3534283c3b9aaff81eeeb9793eb0dde69bc1f9855e70d057c69daa46cbaaa7ecbb3e183a8df9b44c1db3185fb448df8b4fccbd06252b872af2f010b41
SSDEEP

1536:s6hqmbQ8NNunP1zdjLWQLV0AaTCnNUjyIFdWMBAVFbSKEBEBqwlh+qplOJVkxx:x1vjutlLWIXxnH+ypSXBKBlJp2kx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd7692d0a8a618a78463b56cce12df1e_JaffaCakes118

Files

dd7692d0a8a618a78463b56cce12df1e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 343KB - Virtual size: 343KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ