df8b18923e612aa1839df0bfdb485ab6_JaffaCakes118 | Triage

Sharing

General

Target

df8b18923e612aa1839df0bfdb485ab6_JaffaCakes118
Size

8.6MB
MD5

df8b18923e612aa1839df0bfdb485ab6
SHA1

ed0fe1129fec03c9d52f61f8182bd3af909fa855
SHA256

909a69bfaa00dc2bcac6824929efa1f4a77e87cf26ef2b5e904604cf300572a0
SHA512

fc0c81722a584cfa082568409364a3df79f418e8c9c62585e8910251b502c2dc6af3ea00820c2a24736bdde7fac1de07c4554bed7e4d43bf56ddfbc6225847cf
SSDEEP

196608:xrG4P72UTkx1PniFc+/0TQPW70j4NNl8fikfRlgs1OV2fJ59ZxEIZjH:vdkPAcJTeVkNNl86qEs1OVO5eIZjH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df8b18923e612aa1839df0bfdb485ab6_JaffaCakes118

Files

df8b18923e612aa1839df0bfdb485ab6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 424KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 40KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE