de7671351682a379d0799915ce7de1a4_JaffaCakes118 | Triage

Sharing

General

Target

de7671351682a379d0799915ce7de1a4_JaffaCakes118
Size

58KB
MD5

de7671351682a379d0799915ce7de1a4
SHA1

ea65e5ee27abd39180fe577ed0b37e4b68df2430
SHA256

bb54e6ac9fb386a31ec43729e8d3410e14da49454c1a292af98978b00bc671d3
SHA512

8d601fdb7aea2328e9928a5ad93f154479f9db640ac58db86418671b2b2cfa0f2eeec643f7434f4b04d5b168ee352b8b184a280b1be7dfd70c096db7990e5c0e
SSDEEP

1536:G9t6/wCwtgE4QjCSbU8KBaRHg51YG8OwZss6Sbkc:G9t6/rGjC3xYlL5OiF67

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de7671351682a379d0799915ce7de1a4_JaffaCakes118

Files

de7671351682a379d0799915ce7de1a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

590ec3a538f3d406d8f205084e114969

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFile
GetFileTime

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ