df990b6a03a5d34a5492a819b81643e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df990b6a03a5d34a5492a819b81643e0_JaffaCakes118
Size

191KB
MD5

df990b6a03a5d34a5492a819b81643e0
SHA1

f202367b70aba95297cbb121f360abb992c516a2
SHA256

8a75270f2d88dc77915fa46b23c3b1bc8d3f70deed323e05519e0b8ead22a1f6
SHA512

55c744d8d1889fde0e2e21fb8f9c52058f06389d244981d0fac373a8e8395bb04b66a5787c52462a710344a3ae85bdcd43cc2fd93b19d8e3a35ce83cec355f05
SSDEEP

3072:3GvRs5+ECij/e/NRDFiC+fqq8nTZT4A6FerNc2J46pSxX1kXjDni8tUGtHAnuWD+:3GvRs59e/N6CJqGZTiB24RTkXHni8+n6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df990b6a03a5d34a5492a819b81643e0_JaffaCakes118

Files

df990b6a03a5d34a5492a819b81643e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 462B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ