df8894cfcead358e5630933f087b610c_JaffaCakes118 | Triage

Sharing

General

Target

df8894cfcead358e5630933f087b610c_JaffaCakes118
Size

171KB
MD5

df8894cfcead358e5630933f087b610c
SHA1

729fcc99d67ab62baa0d0b0d95b56ead083750f2
SHA256

1a0269b31590f52f45793d077a9a31c34d232eb4ebf80616b42b66a2cce84f06
SHA512

d3df69b6d10c41008302a8e1fb4860a52114ebf9dadf8001016ccf364ab77f08660d136b2e830de96797df9756f4afb5e1f8da9d4dac183dd5af7afc1fe82554
SSDEEP

3072:loHJe8hQwn3COOYYlHBI8wbwA2v5JmaLOezgdyNwPlk7YquibhECqKA:loHJx1Ozy8mwA2vyUOxXPa9uibhB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df8894cfcead358e5630933f087b610c_JaffaCakes118

Files

df8894cfcead358e5630933f087b610c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 603B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ