de482696e887ffa1a08ad84785db8d3f_JaffaCakes118 | Triage

Sharing

General

Target

de482696e887ffa1a08ad84785db8d3f_JaffaCakes118
Size

1.1MB
MD5

de482696e887ffa1a08ad84785db8d3f
SHA1

f5a1ff6dca5ede9c890dbee818f1824cd4354a51
SHA256

54c2226e16f19979a7c275303ecc07745e3f72652e25d1f5af3d81442677492f
SHA512

7c0c6ec4f4e3de0d7df2b8b9924f08a14cd9bf4970d4a2c88a52f584ce04e1fd49e89df091115752b72db045c80d8bfd7b7c771f4f7802eedd79bce2c059d4c8
SSDEEP

24576:pIH1m9FlaCEAvL6yD4g3GSTV2dz8St+LeS:pIZyVV8R84dS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de482696e887ffa1a08ad84785db8d3f_JaffaCakes118

Files

de482696e887ffa1a08ad84785db8d3f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 912KB - Virtual size: 912KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1.5MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ