30885b7a0d8fe3cdc05243135577ea74_JaffaCakes118 | Triage

Sharing

General

Target

30885b7a0d8fe3cdc05243135577ea74_JaffaCakes118
Size

8.7MB
MD5

30885b7a0d8fe3cdc05243135577ea74
SHA1

b55efb170f966d474e636e6368058e6c5393f3f6
SHA256

630e7ad9d5ae6e35cce1717e2bb9fa9e702458fa0bb6f6b5c8f681bf433ff917
SHA512

6d26b67150e9d0b45738ccf20242da9302efeb6851e981dfb0c808e52988e8a5ce299ce7052c94d92582cbef0ce456d57f08e1bb8d703e3828162d7b040edfc0
SSDEEP

196608:MDFMT+sGCSkxBkt0GxDir4A40TonAqh+2bYzE:MXCHBk2tTona28z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30885b7a0d8fe3cdc05243135577ea74_JaffaCakes118

Files

30885b7a0d8fe3cdc05243135577ea74_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.1MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7.6MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ