dfdc063a15d1212337d8a96c6928baf0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfdc063a15d1212337d8a96c6928baf0_JaffaCakes118
Size

563KB
MD5

dfdc063a15d1212337d8a96c6928baf0
SHA1

ac06d8c027d585b3416e27aa310d2ca2b1fd7c1c
SHA256

b95f904ff217ce9b4aaa67feae3ce8ddead85b62f2dc5ffe6d14d2d53329aa06
SHA512

8d70b465e49372b52e37a197056c7445d0895e0522688ca923c39ebbbaf5e3b8f717dbaed2192ce7359630fcf003a6370ec4df7b8342784396c789d15abe92e9
SSDEEP

6144:WfX+tvsKV9db7he0ww0VgcVZDOqkc2rSqb8wqOYLrG1IvC4zRltzE2PPorpqjFjZ:oX+FtV9d/hbww0VHiuxnGuZRHzEKpm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfdc063a15d1212337d8a96c6928baf0_JaffaCakes118

Files

dfdc063a15d1212337d8a96c6928baf0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

@@Unit1@Finalize
@@Unit1@Initialize
_Form1
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 475KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ