dfb85fd56d7b9778a89051ef8d6dff82_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfb85fd56d7b9778a89051ef8d6dff82_JaffaCakes118
Size

2.5MB
MD5

dfb85fd56d7b9778a89051ef8d6dff82
SHA1

0325943bc898759f726515fd2db4df235c4dcfea
SHA256

bfaeb56ed78afa46f99a5f80b550a9bfffc385ba36275f59aef9b78072eade89
SHA512

b2a5b79bb3d3d421d166eab6dcc611417adb0c3fcc1d2ef318cd5e6f1c11bc7b453121d8652d9f5e80edb79c8950001a028526c8c978e5ef52ce3ba6b2e42b16
SSDEEP

24576:DHNZYay/0nGFCPSxdLDOeBk/6yRryvqBz7gKp6ZT/p7hshszgaEz2d8Xkwgeno3S:hmfLz46a0qR7PAZT/p7Cvk3eeZE/B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfb85fd56d7b9778a89051ef8d6dff82_JaffaCakes118

Files

dfb85fd56d7b9778a89051ef8d6dff82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.fee3q9
Size: 1KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wp0$yt
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l5ctno
Size: - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tss
Size: - Virtual size: 3.0MB

.edata
Size: - Virtual size: 416KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rtss
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE