31bc38d90ad857e09359683b479eea4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31bc38d90ad857e09359683b479eea4f_JaffaCakes118
Size

6.0MB
MD5

31bc38d90ad857e09359683b479eea4f
SHA1

eb20d926ddb4788f96a1f7a589dbeef8f8faba46
SHA256

8a67d75b06a8576f4f27e0c63b2fe8b3700764bac2e1a3ce60631a2262f3545b
SHA512

9a0bb1a03b069cd10255665e8797489eaf414f7a807b381bb8c24a22d243c53ac9659d7492243e4ce6dd118d22dda24c47ba55871fe0dc76848b2d3b2a215ac7
SSDEEP

98304:bBvu0RORqVZzgETq3C18DjU08WyYoywPwOOV1XPOaPhqN+NRlbhqZLsdVsPFUGcE:bBvu08RqVZz/Tq3C18DjUPWyYoywYOOy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31bc38d90ad857e09359683b479eea4f_JaffaCakes118

Files

31bc38d90ad857e09359683b479eea4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 102KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE