309a5b304c2f8d16e339d69c117b69c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

309a5b304c2f8d16e339d69c117b69c9_JaffaCakes118
Size

159KB
MD5

309a5b304c2f8d16e339d69c117b69c9
SHA1

e5b0f4d566cc2965850d652c7480dcfa6bd18fc5
SHA256

60abc8f7978d6074a898e61998a56e70c34a92d188041761a7f493fd80eb8fa4
SHA512

3f8048d73e71db723a4c0b8f204ad0905fe525cd9bd9954dcfd5590f28b029fc79e1ded1a009d79d5b5c1562a5a23a0ec6e3e1de2e83c289eeff72df4366bffd
SSDEEP

1536:Gy+5C5N+eMpdCdmXKp1Q1BlKo0uJTKW8rpY8ZN+eMpdCdmXKp1Q1BlK:GvMZCQmaSBlKCuZrV5CQmaSBlK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
309a5b304c2f8d16e339d69c117b69c9_JaffaCakes118

Files

309a5b304c2f8d16e339d69c117b69c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Bit(^&s
Size: 32KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Bi%$*ts
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

B)&)&)&)
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Bi)&*(s
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

B%$%
Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size: