dff840fb1cae0561d8497cfd0d009ee9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dff840fb1cae0561d8497cfd0d009ee9_JaffaCakes118
Size

52KB
MD5

dff840fb1cae0561d8497cfd0d009ee9
SHA1

324e695786bd73941379b46297a8e2652ad45b4d
SHA256

435f6e506a5e7ff449111b7034cc26703be3f4225650a52c96b00cfbb6a146c4
SHA512

0d90f47ca8ece6fdbe601069d938af8ff0248ec706d044c8f90507aafb6969bd6ea792fdfb31d87b157558d694d6a9207f7aa4beac504d4045d33ed2966f05b1
SSDEEP

768:fHIEA4RbUxckirMDTXDuT+pxvPDgAiXKZC2p2ng4nGwcsb:fBUwrwTXcCvfA2p2nNWsb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dff840fb1cae0561d8497cfd0d009ee9_JaffaCakes118

Files

dff840fb1cae0561d8497cfd0d009ee9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 336B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE