309465c393bdd1e9b5e50d09440c6632_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

309465c393bdd1e9b5e50d09440c6632_JaffaCakes118
Size

39KB
MD5

309465c393bdd1e9b5e50d09440c6632
SHA1

20f6c37d52fe8794ceb6800775d395a5727d6a89
SHA256

9fb6d24ab3510d933564a8112678c15b1225746d4a1c613cbe6271503f628d15
SHA512

15b1aa7b779a26dec5bed604c1d787f9cf23d21ab7848bef6d0ad1761d0ddb4b4263a373d431a20a7e5f972170558e2fe1d1fe4bb6038846e70a80abcffc96ef
SSDEEP

768:UTJbp0RRXEXSVWX+kBMT3+u61OOI+3lX74p5K5in1OmaOTB:2bijUi0kHO74p5KAv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
309465c393bdd1e9b5e50d09440c6632_JaffaCakes118

Files

309465c393bdd1e9b5e50d09440c6632_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ