df4cf7ee6e42b38c4edbf24e66701cd4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df4cf7ee6e42b38c4edbf24e66701cd4_JaffaCakes118
Size

391KB
MD5

df4cf7ee6e42b38c4edbf24e66701cd4
SHA1

d5fba9234b17a1a336685203607b2c8445012796
SHA256

e94b5a8884446a93d3d54bae01f28a8a04941f6b43d9ee315e921c2c1e87b8e6
SHA512

50ab074a11a671882718e10b139bef6089349eed870bae34b4441ef44b92534148c44c99ea526f887c3a0f31e2f38abee55fcfc01769f92d00301276cffcf459
SSDEEP

6144:1OAAr2F78NDXmZgbdm1oaohG+sTnvpX/CWIuQzJZ1saqfwqXO3BksZ0EkZl:kAAr2FgNDXVxsTnhJQzhJqYaTX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df4cf7ee6e42b38c4edbf24e66701cd4_JaffaCakes118

Files

df4cf7ee6e42b38c4edbf24e66701cd4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ