30346bc3a44f041b008e18bd4d407087_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30346bc3a44f041b008e18bd4d407087_JaffaCakes118
Size

314KB
MD5

30346bc3a44f041b008e18bd4d407087
SHA1

59cc0e59ac07a7ba28ae4ae90feef984a5a3f235
SHA256

2bd3d4e85e504c712bded912ed82e4b7d8ff1badef79a5dacb595f63eb29c496
SHA512

3bf202cfbcc534822fd8d88dbf1252b2bbfa03fe59825215080d570e07834830dbaf787b59364a8f726b20488d2f4779ec435ed93f2d3a77b5f20f0e4649b873
SSDEEP

6144:Zg6ygE/BBIp/E5DCbMeFcMKrgGcC8uomqFMVnKLOgNgueVFp:Ty/mMFcPFcr8ZKCpgueTp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30346bc3a44f041b008e18bd4d407087_JaffaCakes118

Files

30346bc3a44f041b008e18bd4d407087_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.data
Size: - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hacksa
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rsrr
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE