ddc4b9086326c5d9936bceb96b89cd8d_JaffaCakes118 | Triage

Sharing

General

Target

ddc4b9086326c5d9936bceb96b89cd8d_JaffaCakes118
Size

382KB
MD5

ddc4b9086326c5d9936bceb96b89cd8d
SHA1

023ae552ccff48cf9a1b44282cd594d7b17bfb60
SHA256

cac31439a1b8ddab2d383fac7233bff6a8fc4d01957200d7664412d7c57f80fd
SHA512

e5c332ac1bf3eb710119162b48cbc8cde8fc7bfde1928f38fdcc716618fd1c5c3e9cb836c552e985b729c66c2bfe68bf95bcaf9a25489d9b9178bc3e3a20c395
SSDEEP

6144:JaOyvgt6aSgBwI5BoyD/9jv6DmoEjFSbCDb4DmrExmDYyJ81bns/oWUZSHl:Zy44aSgGID/9jUKjEgb4m81bs/o5SF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddc4b9086326c5d9936bceb96b89cd8d_JaffaCakes118

Files

ddc4b9086326c5d9936bceb96b89cd8d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ