df347ba05cbb8f7e0488d8953fab71dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df347ba05cbb8f7e0488d8953fab71dd_JaffaCakes118
Size

900KB
MD5

df347ba05cbb8f7e0488d8953fab71dd
SHA1

b400528fe5e195a9c6ee72d0bcb08261b9d30701
SHA256

05e98500f016989ad85bfb9e30fd3dedf05e1c5060d2f77ec00651b92d039b5a
SHA512

9f80b8d529a7e3e1e9a341bbf87aff67ceed04ea2668b6385e489fca4f7e0185c9f183600afe97f596e6047147b10bcd71ecb6dbb090bbf1c8d47b72503cced8
SSDEEP

12288:PShoXFw9Z/OXTJAvg6MSeetAuxixBF/dRKtS6TC6yLFJtK:yo1GOXTJt6Mot/Ax/dgnTa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df347ba05cbb8f7e0488d8953fab71dd_JaffaCakes118

Files

df347ba05cbb8f7e0488d8953fab71dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 599KB - Virtual size: 598KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ