30a02f5305acaa253eca9212a0dfb5be_JaffaCakes118 | Triage

Sharing

General

Target

30a02f5305acaa253eca9212a0dfb5be_JaffaCakes118
Size

3.0MB
MD5

30a02f5305acaa253eca9212a0dfb5be
SHA1

cc27126a8a294ae3eb865c4f8e005a1554962073
SHA256

5b59c8efbcaeaff2374461d284baa1475d23a97789f0ee3e582ddb287bfb1fa6
SHA512

7c8bea308070ed37838476098b03ec49abc7e0679e4aedb5d2eac7f22a57d54440f595df85800c20e1edd3b29684d5b3a6c8e7c99028d803983f5a0b2b4b3d75
SSDEEP

49152:F/DMRnEP+l5TtKgw4ONO6ArMCj9BDDR2cuXgo6WJMxM7:FelRtVwtNO6ArMW9BDDzu/6WJMxM7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30a02f5305acaa253eca9212a0dfb5be_JaffaCakes118

Files

30a02f5305acaa253eca9212a0dfb5be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 645KB - Virtual size: 644KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ