General

  • Target

    738303222995d02e55f15b5b0d55e414_JaffaCakes118

  • Size

    13.9MB

  • MD5

    738303222995d02e55f15b5b0d55e414

  • SHA1

    c17d0bff16fa13a828b307ab25fdd6f19370c076

  • SHA256

    2ac15b095461bca0a32d4e03a9fca2f7811eeb7af7c7d63b8ec5b51e494f69b4

  • SHA512

    a1ba6dde86f9bf68c562c06b2dcdf9e10139df7b6c3a9498ec1ec26c3513f88b0e47a904ead0b65de17a2b55ec569c22f2b131ae5e744fa9e8e80f34c0961705

  • SSDEEP

    98304:4S2M/gDlz5c38SjK8iHFE01+vVjoxmo4XW1/:4Sv/gDRcK8mb1+vVjmm1XWJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 738303222995d02e55f15b5b0d55e414_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    219be2aa827f30f5f10e3a5f98736ad1


    Headers

    Imports

    Sections

  • .data
  • .didata
  • .edata
  • .idata
  • .rdata
  • .reloc
  • .rsrc/0/RCDATA/DVCLAL
  • .rsrc/0/RCDATA/FMVJNJNPUJLG
  • .rsrc/0/RCDATA/GKGTTH
  • .rsrc/0/RCDATA/NJIFILF
  • .rsrc/0/RCDATA/TMEQVPGHHJMGDEC
  • .rsrc/0/STRING/4078
  • .rsrc/0/STRING/4079
  • .rsrc/0/STRING/4080
  • .rsrc/0/STRING/4081
  • .rsrc/0/STRING/4082
  • .rsrc/0/STRING/4083
  • .rsrc/0/STRING/4084
  • .rsrc/0/STRING/4085
  • .rsrc/0/STRING/4086
  • .rsrc/0/STRING/4087
  • .rsrc/0/STRING/4088
  • .rsrc/0/STRING/4089
  • .rsrc/0/STRING/4090
  • .rsrc/0/STRING/4091
  • .rsrc/0/STRING/4092
  • .rsrc/0/STRING/4093
  • .rsrc/0/STRING/4094
  • .rsrc/0/STRING/4095
  • .rsrc/0/STRING/4096
  • .rsrc/1033/CURSOR/1
  • .rsrc/1033/CURSOR/2
  • .rsrc/1033/CURSOR/3
  • .rsrc/1033/CURSOR/4
  • .rsrc/1033/CURSOR/5
  • .rsrc/1033/CURSOR/6
  • .rsrc/1033/CURSOR/7
  • .rsrc/1033/GROUP_CURSOR/32761
  • .rsrc/1033/GROUP_CURSOR/32762
  • .rsrc/1033/GROUP_CURSOR/32763
  • .rsrc/1033/GROUP_CURSOR/32764
  • .rsrc/1033/GROUP_CURSOR/32765
  • .rsrc/1033/GROUP_CURSOR/32766
  • .rsrc/1033/GROUP_CURSOR/32767
  • .rsrc/1049/GROUP_ICON/MAINICON
  • .rsrc/1049/ICON/1.ico
  • .rsrc/1049/MANIFEST/1
    .xml
  • .rsrc/1049/RCDATA/BIEPOTRKPIHKK
  • .rsrc/1049/RCDATA/BTYDUANLCTCMDKOANTJQ
  • .rsrc/1049/RCDATA/CGETBDTCCPYMRHN
  • .rsrc/1049/RCDATA/ENJVCLAEW
  • .rsrc/1049/RCDATA/EOYIKKKIVUXVMECB
  • .rsrc/1049/RCDATA/EQWQRLLLDIPKYRY
  • .rsrc/1049/RCDATA/FKDBHNAOUWYOIXWRKRVN
  • .rsrc/1049/RCDATA/HPDUSDJLNERBKVLRV
  • .rsrc/1049/RCDATA/HWFNWWMACQHY
  • .rsrc/1049/RCDATA/JLWIHJMTBEBOVVEDQ
  • .rsrc/1049/RCDATA/MCDXOYJA
  • .rsrc/1049/RCDATA/MRJCBWMLXYBUHQUDMX
  • .rsrc/1049/RCDATA/NELAMMX
  • .rsrc/1049/RCDATA/QAFTJTQQBMCLAXLQFJJ
  • .rsrc/1049/RCDATA/QBNTKDKSWRKKLEVCX
  • .rsrc/1049/RCDATA/SUDRCJOPGSO
  • .text
  • .tls
  • DkIEXgUD