df84c9f350058a09c509ef4156ea6ce2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df84c9f350058a09c509ef4156ea6ce2_JaffaCakes118
Size

1.3MB
MD5

df84c9f350058a09c509ef4156ea6ce2
SHA1

943dbf9bf800bee6f6fb1b5769dc70a4483f364f
SHA256

3cf3417d60409ff10a54ffc8bb85b4c0a3380abf5502ad3934b5a7f971e4e275
SHA512

d3d2e727d4dc36fd9cf281b5bfd7dede88900243159e737ef00606a7485030294fa55c16e41dc897665562292dd406e262b57fa8ea71d9bfc6c22e3f04d2d397
SSDEEP

24576:y13pLb5qsJn6k3m+6TzA8uW4n6vRad7ZgMFX:y1B9rjwTzLuW4n6vC7LFX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df84c9f350058a09c509ef4156ea6ce2_JaffaCakes118

Files

df84c9f350058a09c509ef4156ea6ce2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 592KB - Virtual size: 592KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ