f30993647ed53c6aee78ab2962cc2618_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f30993647ed53c6aee78ab2962cc2618_JaffaCakes118
Size

638KB
MD5

f30993647ed53c6aee78ab2962cc2618
SHA1

105a45b652d92dda6100bba3eef76cc3366f85cd
SHA256

444dd62b12d36bdb543980fad7e8f5cfd89722b91debe8d13f80c2fc9d6dec42
SHA512

7ac48a6fa4f14bad7535d4d4e2c7569c0c467b4118058f73b60c884cf5126ca057945f834d0e71b2b28564d46e04916615477e8e348321460383f7b73c24c8f3
SSDEEP

12288:sO/14m+h0n31L9XcKVWkfs0N6MrMM/WdRxxNfqvkAH6A5VdKQa9R4:sO/MhA31L9XNVDr2PPRqvkM6AXde9R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f30993647ed53c6aee78ab2962cc2618_JaffaCakes118

Files

f30993647ed53c6aee78ab2962cc2618_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 248KB - Virtual size: 552KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 384KB - Virtual size: 920KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 512B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE