df69d2caa796df4543e0493a50f07b69_JaffaCakes118 | Triage

Sharing

General

Target

df69d2caa796df4543e0493a50f07b69_JaffaCakes118
Size

502KB
MD5

df69d2caa796df4543e0493a50f07b69
SHA1

74e10cb660147514a42f5234abdfa09311c06398
SHA256

d52bed3aedf780b69f3f16e2d2cc740497664d479bb4aaa69206200106628f49
SHA512

4d392126f8e77ed400cf06b1db3fb6a461d928d9eaeb16f819f6780ec65c61cd72fa63867ee052a3e925ca4c636fa31f2e69f1ef5b8b1b7809fb3fa6d13bc896
SSDEEP

12288:0Tj5sOygBWeHFWjNZ8BiyL/osJ4u0hhSrOaCDOSpx6emZYQh:gj5rBWeJjsJuMza9emZYQh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/INV 493178246.exe

Files

df69d2caa796df4543e0493a50f07b69_JaffaCakes118
.eml
INV 49317824.7z
.7z
INV 493178246.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 515KB - Virtual size: 515KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
email-plain-1.txt