0388870c72ae04dd717f5f01a11e638c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0388870c72ae04dd717f5f01a11e638c_JaffaCakes118
Size

261KB
MD5

0388870c72ae04dd717f5f01a11e638c
SHA1

4c9e8f969141a0c2c4e53d936a2a44e48a70940e
SHA256

5e171bcf410c4f99982ec53bdf17decd56095718b44f665179d1fd9f7baf943c
SHA512

501b07107fd380d4c243edb06a47e03b8ab99c6cb8447651103f002b86f51316c4a0cc3c1deea9c05d766cb482d04d8e7cf916f37d27b60e80dd757dc53b331e
SSDEEP

6144:h8lFnUowzknR8Tt/ZppnbF51aPzdhkN8I4:h8lFFwz7h/ZbFSPhhC8I4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0388870c72ae04dd717f5f01a11e638c_JaffaCakes118

Files

0388870c72ae04dd717f5f01a11e638c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

PINTLPHR.pdb

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rol
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE