de87bee02873cfb4293ba456a13e87b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de87bee02873cfb4293ba456a13e87b8_JaffaCakes118
Size

102KB
MD5

de87bee02873cfb4293ba456a13e87b8
SHA1

f115152528b9f8182638f7accf8e32d3ae760189
SHA256

e85f6e44314b172f44eaa01ff5357370c2b3dce8e9d474525d4d60d04d5066f0
SHA512

b408cad550b6b1f78159c37e145a631d834abb2039d053ad63161e6d1b1ac6659caa86ebc41293bc14ad6ec04d5de8f7860033694c82eb028a59e44194fe01db
SSDEEP

1536:w4pgFo63GSIOyIGWe0TUtGdYNPpg0Fe/IXn:wygFoggQehi6e/Mn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de87bee02873cfb4293ba456a13e87b8_JaffaCakes118

Files

de87bee02873cfb4293ba456a13e87b8_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo

Sections

code
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc
Size: 1024B - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE