30d645da89dd7034b84ad2e087986ece_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30d645da89dd7034b84ad2e087986ece_JaffaCakes118
Size

628KB
MD5

30d645da89dd7034b84ad2e087986ece
SHA1

b4996028b5c12bb681e624065e7cc189c5801604
SHA256

350ebb1c67778fd9dd7a8c3c5a46f903ad75434c0e42b3bd2825946401720ad2
SHA512

f82186a741a31ec5f2c75cf5b6029dc809b99f4fc03f2c4d690fa685e731c1fd3a86a738c9bbedd777895c5ebf50d4bd8baef6f107091cf74f25d0991f72cf78
SSDEEP

12288:5E7VKbnFuFeFeGULEc4CZMPn3zJn6HWaIRL6S8ageJoXKC3FH:5W8bn0F0eGQEc4CZsOigeJaKCt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30d645da89dd7034b84ad2e087986ece_JaffaCakes118

Files

30d645da89dd7034b84ad2e087986ece_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 17KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

services
Size: 520KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE