30253bdd29aa9a41b954f6064a7f5199_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30253bdd29aa9a41b954f6064a7f5199_JaffaCakes118
Size

12KB
MD5

30253bdd29aa9a41b954f6064a7f5199
SHA1

57b6bc0b4144f21366e330750b965a2b767f4cf8
SHA256

ef2d88e80cd5ffff587b0383f56be171ba1328149601b604679dac669e0eda18
SHA512

19386ba6d7b5f84f11af75878d48522dd4eef0c2dfb9e417f2edce25e1cbbaadedf6944e3703591c344abcc6242df521ad9155ceb1f360d37ec1fed086d0d3db
SSDEEP

192:ntYTwiv76wyzGUmUMhNmpusfIoDiCpBMNuMPB3nHOhLa28izT:r67RUa0puIInjuQgLa28iz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30253bdd29aa9a41b954f6064a7f5199_JaffaCakes118

Files

30253bdd29aa9a41b954f6064a7f5199_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 17B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bbt2008
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nah
Size: 434B - Virtual size: 434B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE