324c36369353f40cd5cfa1d757adaf0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

324c36369353f40cd5cfa1d757adaf0b_JaffaCakes118
Size

135KB
MD5

324c36369353f40cd5cfa1d757adaf0b
SHA1

ac9d950f2245b15caf0a209aee80deab40915a97
SHA256

334330a0628e05b329e07e502a0fa18370b545b770d1c24e0dc6c47e90700893
SHA512

a4ab949a5d9a957a0c4708d46319207bfc4e83a7c1a795966d07fc2a77ddbd6681b777af756bb54aa4bc2c156c64764d923c247d9dc9a12cc63c678a7253bc0e
SSDEEP

3072:GNYUFrK3LPKBId4UJC2SP8nM3o99s/rF9rOoufAsvOGa0Jl:xBdNCoM4yh9zGa0Jl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
324c36369353f40cd5cfa1d757adaf0b_JaffaCakes118

Files

324c36369353f40cd5cfa1d757adaf0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.5cinle
Size: 1KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rtss
Size: - Virtual size: 3.0MB

.debug
Size: - Virtual size: 408KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 120KB - Virtual size: 124KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE