General

  • Target

    6268e3c8e041c0439044f06d9c7a617d_JaffaCakes118

  • Size

    7.6MB

  • MD5

    6268e3c8e041c0439044f06d9c7a617d

  • SHA1

    7d369d6d0cf7548dea4aed4806d04d33f2cccb17

  • SHA256

    431816d0c7858fe7d7a027253d0d4cbb4b1602f95b3946eb95162eafe8ec3a6f

  • SHA512

    6debf35192622804b37ff6877b9368bac709a431739abb2b0ecb3352de446d3b47cd1ca9d66be662733279bd0b2db5889961c5dfc2a1c0cf0ab5c1b63886592a

  • SSDEEP

    98304:iQJn48wSRUxpzmDhbuC3ur+vGJdWN3Z4J22Ph0:iQJn48wSRUxpzmDxm++Jda3n2PG

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6268e3c8e041c0439044f06d9c7a617d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    5e575945a91b4e45aabfe51dd1faaaf2


    Headers

    Imports

    Exports

    Sections

  • .data
  • .didata
  • .edata
  • .idata
  • .rdata
  • .reloc
  • .rsrc/0/RCDATA/ACCYBDQXARUN
  • .rsrc/0/RCDATA/DVCLAL
  • .rsrc/0/RCDATA/EPPAAV
  • .rsrc/0/RCDATA/SWSQDBD
  • .rsrc/0/RCDATA/VGSSTDBSYSCRYFR
  • .rsrc/0/STRING/4078
  • .rsrc/0/STRING/4079
  • .rsrc/0/STRING/4080
  • .rsrc/0/STRING/4081
  • .rsrc/0/STRING/4082
  • .rsrc/0/STRING/4083
  • .rsrc/0/STRING/4084
  • .rsrc/0/STRING/4085
  • .rsrc/0/STRING/4086
  • .rsrc/0/STRING/4087
  • .rsrc/0/STRING/4088
  • .rsrc/0/STRING/4089
  • .rsrc/0/STRING/4090
  • .rsrc/0/STRING/4091
  • .rsrc/0/STRING/4092
  • .rsrc/0/STRING/4093
  • .rsrc/0/STRING/4094
  • .rsrc/0/STRING/4095
  • .rsrc/0/STRING/4096
  • .rsrc/1033/CURSOR/1
  • .rsrc/1033/CURSOR/2
  • .rsrc/1033/CURSOR/3
  • .rsrc/1033/CURSOR/4
  • .rsrc/1033/CURSOR/5
  • .rsrc/1033/CURSOR/6
  • .rsrc/1033/CURSOR/7
  • .rsrc/1033/GROUP_CURSOR/32761
  • .rsrc/1033/GROUP_CURSOR/32762
  • .rsrc/1033/GROUP_CURSOR/32763
  • .rsrc/1033/GROUP_CURSOR/32764
  • .rsrc/1033/GROUP_CURSOR/32765
  • .rsrc/1033/GROUP_CURSOR/32766
  • .rsrc/1033/GROUP_CURSOR/32767
  • .rsrc/1049/GROUP_ICON/MAINICON
  • .rsrc/1049/ICON/1.ico
  • .rsrc/1049/MANIFEST/1
    .xml
  • .rsrc/1049/RCDATA/CVOQQNWJBLIX
  • .rsrc/1049/RCDATA/JLWIHJMTBEBO
  • .rsrc/1049/RCDATA/KYBXKEOYIKKKIVUXVME
  • .rsrc/1049/RCDATA/NARVTNSRTR
  • .rsrc/1049/RCDATA/NDEHXKTIASUDRC
  • .rsrc/1049/RCDATA/NPDOOQMMRJCB
  • .rsrc/1049/RCDATA/RGHPDUSDJLNE
  • .rsrc/1049/RCDATA/RUUWAFCPEFCYIELIS
  • .rsrc/1049/RCDATA/TVRGQDAVAQJNJ
  • .rsrc/1049/RCDATA/VCACHVHWFNWWMAC
  • .text
  • .tls