de088d6b4f10eaaa758a2508ce8dd3da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de088d6b4f10eaaa758a2508ce8dd3da_JaffaCakes118
Size

512KB
MD5

de088d6b4f10eaaa758a2508ce8dd3da
SHA1

3c95ca20f5967796edee7cc4f70ce1209c5da40f
SHA256

9165831c7af085a742c0d15d536076e2726dcc29f494fa9f18787a9e8233d503
SHA512

9bf2aa7db04f190dd55b6d90506a6e2d6e16d15c94c12f6227274faecb3b77adbc40ee0d82116087511d1a750778b2ab5da6037aef6b5f99504ebbdd3eaf95b8
SSDEEP

1536:vn42QuXjBS6WNxMqSHsIUfO3NMIf0jb3D3kFwDhOo9ZVhc+HhbcmRQ:v4buVS6WN3SHsjfLVL3kFwDQCVh7uKQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de088d6b4f10eaaa758a2508ce8dd3da_JaffaCakes118

Files

de088d6b4f10eaaa758a2508ce8dd3da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.mfok
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.jhph
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.endhe
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pmgid
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.coaoa
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 571B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ