General

  • Target

    f04bcdc2659da18f310aabaa5eb9dbc4_JaffaCakes118

  • Size

    6.8MB

  • MD5

    f04bcdc2659da18f310aabaa5eb9dbc4

  • SHA1

    458ae2f011ce3e98604d67d28b7f542bcbacc62a

  • SHA256

    5ce77b03676de9b0d1a2c919323bf6ea11c549434a2d4f803b448f8d289730c3

  • SHA512

    b32424c1488094b055c4bae0d7955a4bb248ce6d79ac0ffc9c1f8b3424f6372e4f1c7b69c74d4847e8466b2b8fca7895498b43ad8d7bbec9af6988cccc9aa68d

  • SSDEEP

    196608:SP0JDKn+THucGWfmgNof0H7jSjcakmYqaglRWWRG1gixC5prGAJ+j:ScJDKn+THucGWfmgNoWjS/kmYqaglRfN

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f04bcdc2659da18f310aabaa5eb9dbc4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1d0fd4c44a4ecd5257a4c071c70a4490


    Headers

    Imports

    Exports

    Sections

  • .data
  • .didata
  • .edata
  • .idata
  • .rdata
  • .reloc
  • .rsrc/0/RCDATA/DVCLAL
  • .rsrc/0/RCDATA/FSLIFXBUCGFIJYK
  • .rsrc/0/RCDATA/JDSEKG
  • .rsrc/0/RCDATA/RRGAKUJ
  • .rsrc/0/RCDATA/VRQRKXHTSTKQ
  • .rsrc/0/STRING/4079
  • .rsrc/0/STRING/4080
  • .rsrc/0/STRING/4081
  • .rsrc/0/STRING/4082
  • .rsrc/0/STRING/4083
  • .rsrc/0/STRING/4084
  • .rsrc/0/STRING/4085
  • .rsrc/0/STRING/4086
  • .rsrc/0/STRING/4087
  • .rsrc/0/STRING/4088
  • .rsrc/0/STRING/4089
  • .rsrc/0/STRING/4090
  • .rsrc/0/STRING/4091
  • .rsrc/0/STRING/4092
  • .rsrc/0/STRING/4093
  • .rsrc/0/STRING/4094
  • .rsrc/0/STRING/4095
  • .rsrc/0/STRING/4096
  • .rsrc/1033/CURSOR/1
  • .rsrc/1033/CURSOR/2
  • .rsrc/1033/CURSOR/3
  • .rsrc/1033/CURSOR/4
  • .rsrc/1033/CURSOR/5
  • .rsrc/1033/CURSOR/6
  • .rsrc/1033/CURSOR/7
  • .rsrc/1033/GROUP_CURSOR/32761
  • .rsrc/1033/GROUP_CURSOR/32762
  • .rsrc/1033/GROUP_CURSOR/32763
  • .rsrc/1033/GROUP_CURSOR/32764
  • .rsrc/1033/GROUP_CURSOR/32765
  • .rsrc/1033/GROUP_CURSOR/32766
  • .rsrc/1033/GROUP_CURSOR/32767
  • .rsrc/1033/RCDATA/CHARTABLE
  • .rsrc/1049/GROUP_ICON/MAINICON
  • .rsrc/1049/ICON/1.ico
  • .rsrc/1049/MANIFEST/1
    .xml
  • .rsrc/1049/RCDATA/DIC
    .vbs
  • .rsrc/1049/RCDATA/ETYILANTUV
  • .rsrc/1049/RCDATA/HJKMHOOIXGN
  • .rsrc/1049/RCDATA/LCIJWRXMGHHBQMOT
  • .rsrc/1049/RCDATA/NKQPKVM
  • .rsrc/1049/RCDATA/PIEIHSMFKRWEVEODG
  • .rsrc/1049/RCDATA/RLFGLXR
  • .rsrc/1049/RCDATA/SMKASUHJAKTUU
  • .text
  • .tls