General

  • Target

    364ee8ce93cd339ab81320de0e44d3a8_JaffaCakes118

  • Size

    12.2MB

  • MD5

    364ee8ce93cd339ab81320de0e44d3a8

  • SHA1

    e56783bbc998efef5bbebd2816d14670856a9a34

  • SHA256

    2e4d530be88cf5da732da9787b334720772df9a8f78c3fcb5ba01cba74e4a2ca

  • SHA512

    862a34594ec9f02b56e1dd2638fb26f990f59c67bf1867d806b68e0b49660ee19d02b1c5408f8a1c0b91e1875ce881af88d2e063837db65d7f500168523d7e68

  • SSDEEP

    98304:qWRhbiKZu3pKdL0z0SPdiBvNDrUpbci6X:qWRhb7RdL0z0WdM9UpG

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 364ee8ce93cd339ab81320de0e44d3a8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    219be2aa827f30f5f10e3a5f98736ad1


    Headers

    Imports

    Sections

  • .data
  • .didata
  • .edata
  • .idata
  • .rdata
  • .reloc
  • .rsrc/0/RCDATA/DVCLAL
  • .rsrc/0/RCDATA/FGJNOXNBOOAH
  • .rsrc/0/RCDATA/OLUEJOO
  • .rsrc/0/RCDATA/UNMNGM
  • .rsrc/0/RCDATA/WMPSDBWGVELMMGM
  • .rsrc/0/STRING/4078
  • .rsrc/0/STRING/4079
  • .rsrc/0/STRING/4080
  • .rsrc/0/STRING/4081
  • .rsrc/0/STRING/4082
  • .rsrc/0/STRING/4083
  • .rsrc/0/STRING/4084
  • .rsrc/0/STRING/4085
  • .rsrc/0/STRING/4086
  • .rsrc/0/STRING/4087
  • .rsrc/0/STRING/4088
  • .rsrc/0/STRING/4089
  • .rsrc/0/STRING/4090
  • .rsrc/0/STRING/4091
  • .rsrc/0/STRING/4092
  • .rsrc/0/STRING/4093
  • .rsrc/0/STRING/4094
  • .rsrc/0/STRING/4095
  • .rsrc/0/STRING/4096
  • .rsrc/1033/CURSOR/1
  • .rsrc/1033/CURSOR/2
  • .rsrc/1033/CURSOR/3
  • .rsrc/1033/CURSOR/4
  • .rsrc/1033/CURSOR/5
  • .rsrc/1033/CURSOR/6
  • .rsrc/1033/CURSOR/7
  • .rsrc/1033/GROUP_CURSOR/32761
  • .rsrc/1033/GROUP_CURSOR/32762
  • .rsrc/1033/GROUP_CURSOR/32763
  • .rsrc/1033/GROUP_CURSOR/32764
  • .rsrc/1033/GROUP_CURSOR/32765
  • .rsrc/1033/GROUP_CURSOR/32766
  • .rsrc/1033/GROUP_CURSOR/32767
  • .rsrc/1049/GROUP_ICON/MAINICON
  • .rsrc/1049/ICON/1.ico
  • .rsrc/1049/MANIFEST/1
    .xml
  • .rsrc/1049/RCDATA/ANFKAKQUBKAV
  • .rsrc/1049/RCDATA/ARPSBT
  • .rsrc/1049/RCDATA/ATUGRI
  • .rsrc/1049/RCDATA/CMGOAVRGHP
  • .rsrc/1049/RCDATA/ERBKVLRVH
  • .rsrc/1049/RCDATA/JLWIHJM
  • .rsrc/1049/RCDATA/JWNNMSJWNOIQGIHSOILG
  • .rsrc/1049/RCDATA/KDKXOFTXMSDYGCJITB
  • .rsrc/1049/RCDATA/MUFUABXI
  • .rsrc/1049/RCDATA/NQJFUYVPWJCXNC
  • .rsrc/1049/RCDATA/QNWJBLI
  • .rsrc/1049/RCDATA/RJCBWMLX
  • .rsrc/1049/RCDATA/UJPBUGMEFIYXLCHQYTT
  • .rsrc/1049/RCDATA/UKLVXKOQPDNN
  • .rsrc/1049/RCDATA/WKBLXKYBXKEOYIKKKI
  • .text
  • .tls
  • WaTLBfPT