320e84e4117e668fe7553eb321ad1684_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

320e84e4117e668fe7553eb321ad1684_JaffaCakes118
Size

764KB
MD5

320e84e4117e668fe7553eb321ad1684
SHA1

38caa98f18084fa7a08ca1fa8df73c227e11f0e0
SHA256

161459afbf50ccf69687c4503e67f4f91041f960dc728260f9fc4484f703573d
SHA512

ddf9b010386149c837b0340e39f69713ad46f91d3b920e13d00580da3c1fddd731e8434af9f17dd3c69259624812e96e0da051f4d951dab8916f39f5a87bbe3b
SSDEEP

12288:4shNSKVGB4eNN6/Y0sKPLbC4SUQbz0mzszWJUHfitzppA:4kgV9P6YMPHCCmgzW4itzzA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
320e84e4117e668fe7553eb321ad1684_JaffaCakes118

Files

320e84e4117e668fe7553eb321ad1684_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 472KB - Virtual size: 471KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ