330ef5886fe0e88b99a6af449e46fd08_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

330ef5886fe0e88b99a6af449e46fd08_JaffaCakes118
Size

360KB
MD5

330ef5886fe0e88b99a6af449e46fd08
SHA1

1fcca25f68ff0c39f17a59bbfb3bbf7ee07a330f
SHA256

16ad91194f27129f6b00c0c98e55808b12e57bdedc11b6150de00667e5a423ca
SHA512

f7d07b0612fd0d7ceed38ca2b7d658f8858ea4ae075589758bf8b53f07cad6add9a80f08fe8f017232d7ae8834724fa8a06a5e0ab41890e09958d26b08a52f0f
SSDEEP

6144:RSOEpmbyBLiLTPVnNfs3t+NTC2bFR8QE6AS+Qip69q9IuHzessLCXWz310Yl:Opm+BLiLTPVnrNGytE69i9xHzJH4l0u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
330ef5886fe0e88b99a6af449e46fd08_JaffaCakes118

Files

330ef5886fe0e88b99a6af449e46fd08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 305KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE