30c15f714237359a7beae3055b66b182_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30c15f714237359a7beae3055b66b182_JaffaCakes118
Size

400KB
MD5

30c15f714237359a7beae3055b66b182
SHA1

ec3390a67280e1e498572c86896f77e0575ef166
SHA256

0239a7288865e0abb03593d28b59abdcb7bf8f8896bb995d89dc3a00d8442efd
SHA512

c578dac8361fef4eaa5bd3174d15bba27bccd0c5dae71f4a5975f825fdecef3622db93b197621c491b7e1ff9c606450c7c6f0f5baaa6565a87a8120fd62f9fb7
SSDEEP

6144:d8cL5nzdHT6Z1iV26cqG9xWjXbH63/HmhN3TlFblrB8oW/uR1gs+LSb:bRzZTSR6zWxK+PANDBLW/Gkmb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30c15f714237359a7beae3055b66b182_JaffaCakes118

Files

30c15f714237359a7beae3055b66b182_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 4080.3MB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ