307a6fe94a92b225c68a5dce0fd7938e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

307a6fe94a92b225c68a5dce0fd7938e_JaffaCakes118
Size

769KB
MD5

307a6fe94a92b225c68a5dce0fd7938e
SHA1

e1c6b89a053c56cd373e27d19124a4c63cbf41f6
SHA256

f670742a192379fdcfbb2acc905cf825976cce92c7a42e03ff4146d940e7f8b1
SHA512

5b38c14b74365a785151db79580578b9d0bdab673214c6547d6d244552c3d16c48945ba98b2bbbdb0c8e4778c597726e7665b76731dbc5c2000f9cb44584eca1
SSDEEP

12288:Jdf0smFeLaxpGpczL1gx4gcvLagKJXm23qpjC7YSouPiRSn4JsFztRd7SfrMn5gi:3QwLaxoKxi4XKpYpU2slJKOgi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
307a6fe94a92b225c68a5dce0fd7938e_JaffaCakes118

Files

307a6fe94a92b225c68a5dce0fd7938e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 744KB - Virtual size: 744KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ