30a4f682ec5fb945a12f49f202d8ed35_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30a4f682ec5fb945a12f49f202d8ed35_JaffaCakes118
Size

18KB
MD5

30a4f682ec5fb945a12f49f202d8ed35
SHA1

3bea6fa20e12dfda5b98268121d4c8569f1057e8
SHA256

397745714187bfae6a7f223226bc5e008c0b8ccd870749203acc8b68c651b939
SHA512

e76ffded5fb67b6b728bce08b95e598d66ab30a26b42463dc76fb333007fd152a06528eaf8df1bedfa2bc60433c729fff81416adcb6fe6da9b76299dcdff1791
SSDEEP

384:TUj+3GqFVSbEmwGq+wINn98MqJeyifs2ZsLP:jfkbECqe9zqUkz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30a4f682ec5fb945a12f49f202d8ed35_JaffaCakes118

Files

30a4f682ec5fb945a12f49f202d8ed35_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

code
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc
Size: 204B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ