df33dded02e8599cd9a9580896c71094_JaffaCakes118 | Triage

Sharing

General

Target

df33dded02e8599cd9a9580896c71094_JaffaCakes118
Size

124KB
MD5

df33dded02e8599cd9a9580896c71094
SHA1

7828521cd32518b40cf7d941211c698a83cf9d6b
SHA256

12819007b41e5de29e7878705285645c19c0c716d972cc2c1d1ebbf5a7658835
SHA512

6914b1fbf6dbfe6c0f2db2c168fe59e220e22c9d74a944217e6dabc8d88f5697e9b95c65022a0f37a1bf987b1e415b9b8755ee3ed981d9a7aae66142f2b7de45
SSDEEP

3072:99oZKQrrUDxq3Lp/CNDs7I7C7O8+cdsNVwueV1s+U9UG:DqpkF8h/+cdsNVwu+1G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df33dded02e8599cd9a9580896c71094_JaffaCakes118

Files

df33dded02e8599cd9a9580896c71094_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ