30dff3c530f4d50e54d40c7c2bf2688f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30dff3c530f4d50e54d40c7c2bf2688f_JaffaCakes118
Size

460KB
MD5

30dff3c530f4d50e54d40c7c2bf2688f
SHA1

bb0c349471f0c64ee0d362dfe9635bc557eced72
SHA256

4765d73e9eec7f8716d796c91159cc548187aad0c591ae6b6f77496efd597be7
SHA512

1430c1e38bf447cd1f5178f4c55674e441935690cccd5112d9cf3a23f7b3f7c163574c11289b49395053adf3537af9da740805db023f8a1bdd84b0e1bd493c19
SSDEEP

6144:sl+AGKZwW/KexjXsnCxCRjqHhYV3a87n8JYirkJ5X0wKyWukBynj/oOesTZfhIio:UzzGWC4jXCCzCp0wkVcsRkSiVqZ0ixX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30dff3c530f4d50e54d40c7c2bf2688f_JaffaCakes118

Files

30dff3c530f4d50e54d40c7c2bf2688f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.icode
Size: 939B - Virtual size: 316KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug
Size: - Virtual size: 3.0MB

.null
Size: - Virtual size: 436KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 411KB - Virtual size: 412KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE