304a147069ed4f667fb77c640c1d20d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

304a147069ed4f667fb77c640c1d20d2_JaffaCakes118
Size

113KB
MD5

304a147069ed4f667fb77c640c1d20d2
SHA1

f20613a65569c53790da35ab79d351dcb43368d6
SHA256

588d73f81cb8950c2e8120501270791c278d6ba00e3b28ecedd619ef2799df83
SHA512

70c360596e55356daf2c76b7ed582fe7b284e9cbae5cfa65b2e715466b692b7c93ff341a2bf16306317a4fd9082eb7579de01164371c078105fca6623655967d
SSDEEP

3072:YbGZ/3I5HwD0EcfxSZxTwZn3fngA0TXYDd6:YCZ/3sHw0Ecfwu3fqX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
304a147069ed4f667fb77c640c1d20d2_JaffaCakes118

Files

304a147069ed4f667fb77c640c1d20d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 52KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ