de05af357bb49b90fa7d3f3384447834_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de05af357bb49b90fa7d3f3384447834_JaffaCakes118
Size

220KB
MD5

de05af357bb49b90fa7d3f3384447834
SHA1

88e219095901827ccff63bb21207d30fcdcf9ca7
SHA256

f46079d48585fb8a6c573db044e3da3beab2a57e8a7b6d5df40d09de1a361ab6
SHA512

aecaead17f6c4365aa57ec04557972a89a70e97aba262fbd95d7ff65883c0d83e901a89460881f4f79be9d9fe602ad7bef00cd5bc60ad93dbbec0bcb65bb182b
SSDEEP

6144:c7O76AK9BXBZUBaYveTuVjFwVZfIZXLi/b69:c7sK9BBKfveTuUVIZK6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de05af357bb49b90fa7d3f3384447834_JaffaCakes118

Files

de05af357bb49b90fa7d3f3384447834_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 130KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE