ddb4d13040e5184d5b99cf16cd801562_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddb4d13040e5184d5b99cf16cd801562_JaffaCakes118
Size

306KB
MD5

ddb4d13040e5184d5b99cf16cd801562
SHA1

7b31dfdb400bb68c1d60ed055ec34886d698226c
SHA256

4339694c45f9f53327d39f13cde23b85724c2d467f58c1622e5089f9a343f40f
SHA512

c0f954c0e320e16e3a1308ff3b9d53b3fd6514e83a3f79b8bf00c06dc493509ff44d6f43f030c7121396ebf786b9f3d6358a5fef3590c1435f8bab5fe8f286ff
SSDEEP

6144:uJNhbE9K57+oNBaJaAt0T2kBrVpq2LEHR:eN/NYJa00Jrfq2L2R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddb4d13040e5184d5b99cf16cd801562_JaffaCakes118

Files

ddb4d13040e5184d5b99cf16cd801562_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 921B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ