0738b010f296e487edd2168422ce4bd4_JaffaCakes118 | Triage

Sharing

General

Target

0738b010f296e487edd2168422ce4bd4_JaffaCakes118
Size

4.3MB
MD5

0738b010f296e487edd2168422ce4bd4
SHA1

39882906fba3bbb56c2e0b89f1370bc866bb4464
SHA256

f108d54a1d6fa6e395398088aab730d6aba8a2765a8d1163c8aff7a48010cde9
SHA512

683ec7a93616ef09e2fdfdc8a00a8d2267f435753dfd17029fa11ff59e9ffea5c893abc5315969c678c7780ea40ffc2f1e540e9ec8bc2dafbc1ea92861f1a04a
SSDEEP

98304:ed9y3m5xO2Okrul6/2Ff5x9bC7GBFXoKaUekEO0jyJfeHdFKRB9PA:i9E0HnrBCf/9WsFXHde2zJgdFKRLo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0738b010f296e487edd2168422ce4bd4_JaffaCakes118

Files

0738b010f296e487edd2168422ce4bd4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ