de4a206da0b0f7f626e467e65a954b12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de4a206da0b0f7f626e467e65a954b12_JaffaCakes118
Size

100KB
MD5

de4a206da0b0f7f626e467e65a954b12
SHA1

468e7a4f6c0bc51478c969191dfd7488ea550ea3
SHA256

9e953a96b2f6bc37f20c4d8245312bf9af1c25df39345de1a3f8d8e984231516
SHA512

5e6b7b1529fff38aa92b0980438fd0bcc225f141aa85a49fa476272cda28b97a7cea2e1215033051905eda57a710ff24e759e4bf73b86798b07f9ae3b115076d
SSDEEP

1536:osqDQv9lewU3y/eB/k/8jrV+jxWO72oRs19T6xyD775Vw0GuQnLz9NshwTK:wQ9le3Vk0f8jxWa2oRE9kyb5OJdz9wcK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de4a206da0b0f7f626e467e65a954b12_JaffaCakes118

Files

de4a206da0b0f7f626e467e65a954b12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ