General

  • Target

    f2816a574453110539953ce3f174cbef_JaffaCakes118

  • Size

    5.7MB

  • MD5

    f2816a574453110539953ce3f174cbef

  • SHA1

    aa65093927b5546e3a8f1234dbf7993268b8f48d

  • SHA256

    2a1edfc9dfdbf4ab3df56fec0b940c82ac7fd41d95800d28d42e5e2bfc423937

  • SHA512

    5bd4b2af650a1c20a5991a21d30b81b1cc7ee99875c7d3212f40c8b03c100553d1d045951269f285dd766c46cba747de295f940d14ed957b082eccd5aba7497f

  • SSDEEP

    98304:XjPtxyKgsZyaXqt+8Za/Rl8jzX3+qofe1mwBz+9lh1iEMvRGxC9D1mQh3dle:XLtxyKgsZyaXqk8Z2Rl8jzXHz1mX9lhf

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f2816a574453110539953ce3f174cbef_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    69ce9ea5153c9734777c61f83fcc3fb9


    Headers

    Imports

    Exports

    Sections

  • .data
  • .didata
  • .edata
  • .idata
  • .rdata
  • .reloc
  • .rsrc/0/RCDATA/AGTGDMSMXDMR
  • .rsrc/0/RCDATA/DVCLAL
  • .rsrc/0/RCDATA/RLANEQCMACRKPBS
  • .rsrc/0/RCDATA/SDSMXBB
  • .rsrc/0/RCDATA/WTDGJK
  • .rsrc/0/STRING/4079
  • .rsrc/0/STRING/4080
  • .rsrc/0/STRING/4081
  • .rsrc/0/STRING/4082
  • .rsrc/0/STRING/4083
  • .rsrc/0/STRING/4084
  • .rsrc/0/STRING/4085
  • .rsrc/0/STRING/4086
  • .rsrc/0/STRING/4087
  • .rsrc/0/STRING/4088
  • .rsrc/0/STRING/4089
  • .rsrc/0/STRING/4090
  • .rsrc/0/STRING/4091
  • .rsrc/0/STRING/4092
  • .rsrc/0/STRING/4093
  • .rsrc/0/STRING/4094
  • .rsrc/0/STRING/4095
  • .rsrc/0/STRING/4096
  • .rsrc/1033/CURSOR/1
  • .rsrc/1033/CURSOR/2
  • .rsrc/1033/CURSOR/3
  • .rsrc/1033/CURSOR/4
  • .rsrc/1033/CURSOR/5
  • .rsrc/1033/CURSOR/6
  • .rsrc/1033/CURSOR/7
  • .rsrc/1033/GROUP_CURSOR/32761
  • .rsrc/1033/GROUP_CURSOR/32762
  • .rsrc/1033/GROUP_CURSOR/32763
  • .rsrc/1033/GROUP_CURSOR/32764
  • .rsrc/1033/GROUP_CURSOR/32765
  • .rsrc/1033/GROUP_CURSOR/32766
  • .rsrc/1033/GROUP_CURSOR/32767
  • .rsrc/1033/RCDATA/CHARTABLE
  • .rsrc/1049/GROUP_ICON/MAINICON
  • .rsrc/1049/ICON/1.ico
  • .rsrc/1049/MANIFEST/1
    .xml
  • .rsrc/1049/RCDATA/BBBIUNUSGYTLVYCJFNYB
  • .rsrc/1049/RCDATA/CCUIYRPBXGD
  • .rsrc/1049/RCDATA/DIC
  • .rsrc/1049/RCDATA/HWBOQFXCXSYNYCIQ
  • .rsrc/1049/RCDATA/LDUDLYUMGKSXCSVUTC
  • .rsrc/1049/RCDATA/SYMGYHGVFVWA
  • .rsrc/1049/RCDATA/TSFHMYDTCNB
  • .rsrc/1049/RCDATA/XVYINDRUUEWIYXHP
  • .text
  • .tls