30cd11b301917acfe5e89f3c49d33abe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30cd11b301917acfe5e89f3c49d33abe_JaffaCakes118
Size

317KB
MD5

30cd11b301917acfe5e89f3c49d33abe
SHA1

ea9ea5a62640d3b66f41790fd28fee7c478a1417
SHA256

3e81e43c3d0cc8e559c779405721780d3b93fcbcc82ab70923c5d5a2d278b48c
SHA512

9b07ed42b33565b730fe1dc0d737a44544ef3fdafbf2f934ea37610b71dd21fbfd967d8f33b8fbee3ce91e5b86767a144ddb2d14f4fd52909563f3638c1656f6
SSDEEP

6144:Mg3/2M4AP9fBG0ia0I6AUDgCP2r30knlB5B+f8a+l8dRF:MOOxAOxaurDMJqB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30cd11b301917acfe5e89f3c49d33abe_JaffaCakes118

Files

30cd11b301917acfe5e89f3c49d33abe_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE