df96503adb7e3b11c132505cd4ef4026_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df96503adb7e3b11c132505cd4ef4026_JaffaCakes118
Size

1.4MB
MD5

df96503adb7e3b11c132505cd4ef4026
SHA1

469c7452bef7905a23f472cf124d67d7e938ab8e
SHA256

5380b172dab2b2dfe7e6d9a45dfc198a32020fbb991c7bd64d1237579d88f982
SHA512

f5387c6ef8e2ba7e4efa52e19a199115b8908f7533cb5cc0cbc25253f5168653e5ba93abf1f5f6455aac95467bda1c4b29337c956e2c33f540c14a75a0c6c97d
SSDEEP

24576:qnjpSqYfiPyjXiNiz8+oV6VMF1Sbrkva/G:mYzfYgnn44MF1Uu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df96503adb7e3b11c132505cd4ef4026_JaffaCakes118

Files

df96503adb7e3b11c132505cd4ef4026_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 683KB - Virtual size: 683KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 625KB - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ