30f52fa6f938dba0eb9ce5e35e04d832_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30f52fa6f938dba0eb9ce5e35e04d832_JaffaCakes118
Size

479KB
MD5

30f52fa6f938dba0eb9ce5e35e04d832
SHA1

2ef172ce581376b530b62f6099d25a04212f538d
SHA256

e36a0274b80b33b297fbf57a8b1821a46cd5c70817f66296047ca21af686736f
SHA512

5162e0f75499fe382814f2c7136acb31f0762680371e382ace9b5d84ecb7ca38d38a992a95ae01de996970e46d2eff0eacf82215843ed18482f82283ce0030ca
SSDEEP

12288:DYm4G+o/U8Oa6EROeZzzhzxzu36F4L3+TAccL:D316EEshN63o4mpq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30f52fa6f938dba0eb9ce5e35e04d832_JaffaCakes118

Files

30f52fa6f938dba0eb9ce5e35e04d832_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 9KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wuaudt
Size: 441KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE