ded18d3d371adbadaa99c2c649ebb615_JaffaCakes118 | Triage

Sharing

General

Target

ded18d3d371adbadaa99c2c649ebb615_JaffaCakes118
Size

651KB
MD5

ded18d3d371adbadaa99c2c649ebb615
SHA1

cb742b1ccfebbf07881b23b7de0444789a369d73
SHA256

c41ad5ab3f3b90941f19fcba465ac3de1c7969814024636ec7fbbb2bee07b7a6
SHA512

b0972f9b4dbcdd08e3c609e9239ec3ee4ee236097e7b854184dd347a8c0a7d1a2b783cc1e5a2f8eeff47a824e20ec85129917bd38b10e758427e020150b7bb55
SSDEEP

12288:Xn5WrxQ9hwM0cqsdxGAukR6E2F6Be8nAOXDpyYbsYKUoUW42:XQrx8h9Osdgk72wJ/4YwY1oZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ded18d3d371adbadaa99c2c649ebb615_JaffaCakes118

Files

ded18d3d371adbadaa99c2c649ebb615_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 405KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ