d3e224728eb5af247bd6712ef6989681_JaffaCakes118 | Triage

Sharing

General

Target

d3e224728eb5af247bd6712ef6989681_JaffaCakes118
Size

903KB
MD5

d3e224728eb5af247bd6712ef6989681
SHA1

c472547d5466d9f5a597e2b54fc3947c2ccc8a51
SHA256

803db359149c66e2403f583d0e8b2ae89b35790a4c075077abed23f198464b24
SHA512

bde330eab07b358d7f976267443e9ccaf6d381a71c66b0bb534ac18257f7bec67c6ae79641726d77b6339681f9a5db561779131dfc80dcfb6ca0b991e8c1e0e6
SSDEEP

12288:z8x1uFkS1Hk48xBX0DGQszHzLZacBQUpI5WxYMjjGVw8t8R0CvyvioO4MZf7oD3+:z8LcZuBgorXZh5wVwS0LszT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3e224728eb5af247bd6712ef6989681_JaffaCakes118

Files

d3e224728eb5af247bd6712ef6989681_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 686KB - Virtual size: 686KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ