de6281af71cc5e4e60c6c7fea0354328_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de6281af71cc5e4e60c6c7fea0354328_JaffaCakes118
Size

149KB
MD5

de6281af71cc5e4e60c6c7fea0354328
SHA1

be538976dda81597689f397b90bea54daa50e739
SHA256

04b8cc25cf46662a3048f747c8d84dcc3aaf85eb551005ebf31ec9fe1e21601b
SHA512

7422d4c5daff1a1aed7386036cebcd67a17703ac33c195f66637a2ac4de3c2d1abbc157e49a892a0efaba1cc1271312ccf4ba38daf9c1f4717d08a4b53fa6029
SSDEEP

3072:VM+urDSI1dFPY5Z5LzjvBT6AnTlQ0LGvPnlsPzE1oLZ+1xiSqEEyxP:A/S4+5jL/BTFpJooQxiSqSl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de6281af71cc5e4e60c6c7fea0354328_JaffaCakes118

Files

de6281af71cc5e4e60c6c7fea0354328_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 16.1MB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: - Virtual size: 953B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE