ddcc801bac7e251a7051ca564e9ca822_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddcc801bac7e251a7051ca564e9ca822_JaffaCakes118
Size

243KB
MD5

ddcc801bac7e251a7051ca564e9ca822
SHA1

81eed756e59f3bb15a8ab1c2645372a2ef74efc6
SHA256

977f620dcc7476f22091f6b911a26d8a1f62b83a0479ed23e193068ab8737539
SHA512

184afb59f7b7dcbcde332d32795da75e89a897fd8936955215f37badf97955ec66e7401a80dd613c6a1251b71ab6708daf4db041a0e72e3c5f790259ac29b06a
SSDEEP

6144:FQxAj1Rhd7r47Xy/o25DYWpjROsjYmyT0IRwDj60T+JR5J7PyR6ueRSGfFTrMO0P:B1R/CXluDYqjYskTvkbT+JJ7PyR6ueRo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddcc801bac7e251a7051ca564e9ca822_JaffaCakes118

Files

ddcc801bac7e251a7051ca564e9ca822_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RCryptor
Size: 63B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nhshmrk
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE