34452eb9da42a9663263688e7393fec0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34452eb9da42a9663263688e7393fec0_JaffaCakes118
Size

515KB
MD5

34452eb9da42a9663263688e7393fec0
SHA1

b6ded476ece4fd3c9362497d73f3afb43c6a2a86
SHA256

580c729555d261aa2e7420a00a1325f37863f9e513e725702cef1540f63e3690
SHA512

4239717858b818a3e0ba621a5fc3eef64eb69085eac809ce934121e76b470401851aca118d358ab4870dc3566a9abaaa8370cb78761a3585e0d759e11295bdd7
SSDEEP

12288:rSn3ajppOCBv9ouvTz+RmEM6dIjKPG4pZON3:8qjyiFouvTzrid6QE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34452eb9da42a9663263688e7393fec0_JaffaCakes118

Files

34452eb9da42a9663263688e7393fec0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 445KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ