f398b7a2b7765aaca0d02f771bc3ee1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f398b7a2b7765aaca0d02f771bc3ee1b_JaffaCakes118
Size

240KB
MD5

f398b7a2b7765aaca0d02f771bc3ee1b
SHA1

40d0fd0d5dcfbe5931f23a1ba5b7db7a27d004af
SHA256

67690f6387a24ff5db6fc4948e83e220874909a02ef15bb022ae8ed62875b30a
SHA512

fbfd15ae259eeb1848c157319d3b0d82b059b585410fc126841c72733c2816dc34b11d98b8272b11fc01ddff94c8b45ce6d51ec02fbb4c85d67da61e9cacdf1b
SSDEEP

3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/e8yQtkaZgxkt8:o68i3odBiTl2+TCU/UQtkqxrqLcbe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f398b7a2b7765aaca0d02f771bc3ee1b_JaffaCakes118

Files

f398b7a2b7765aaca0d02f771bc3ee1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ