399a3af1476bcd24f6d7cbde38e7238f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

399a3af1476bcd24f6d7cbde38e7238f_JaffaCakes118
Size

389KB
MD5

399a3af1476bcd24f6d7cbde38e7238f
SHA1

c9dfe479aea90fe2ea8c60f86c13044ff9dfa338
SHA256

04b326689c727e50f4e10af2f9ca80213570dee1537734ec3218c2c4cc28ee4e
SHA512

268a8509091aeea3cc747c349283f5f8e78821c8254e60faec2f406baab8a0851f00651eadb68239376e2662f7e6da38a5e0b389f1865c44b759449bb9971b4b
SSDEEP

12288:WJGlRjGM0QaeH00AqUJSmdKWPPKPTuFiRLR:WQlR6n84JSmdKWPybISR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
399a3af1476bcd24f6d7cbde38e7238f_JaffaCakes118

Files

399a3af1476bcd24f6d7cbde38e7238f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oli
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE