de35c39072b1f5d6d3a372228552b5f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de35c39072b1f5d6d3a372228552b5f7_JaffaCakes118
Size

701KB
MD5

de35c39072b1f5d6d3a372228552b5f7
SHA1

4fc6b07cc15543585c7c3538e25898ade1c77188
SHA256

d8a4b7955d66c6e2103ab9233cf9cd31995eacd60482c3877432ac2e6b82a128
SHA512

5c33c1da55bf73e434a38fddc72cdf5acbac95dcc05835cffd3c663cb25607b755d69c4ff1642db77efb3c73adcb91f49f852083d2793e3a1c6237be18cdd6ce
SSDEEP

12288:RHaL4llbXS2J5Vh3eSeH2hiDn7hg9D+ceDQfFTmueIGSi0J0PrB0LSITsf7Cw6J:YglDS2zVh3K2hkOeInCjpIT27

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de35c39072b1f5d6d3a372228552b5f7_JaffaCakes118

Files

de35c39072b1f5d6d3a372228552b5f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 460KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.garr
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE