343602c9dc1d3d10a02e1c28670ed1c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

343602c9dc1d3d10a02e1c28670ed1c5_JaffaCakes118
Size

349KB
MD5

343602c9dc1d3d10a02e1c28670ed1c5
SHA1

be921b03d98e39cbf8b0b2ba8662a3ea16114c27
SHA256

0721437ba33be8df12c44bf92e70ed4504278b0c82be4483ab471ba1d655d456
SHA512

a7151a389c8732bdfa146d862cbb0a9aec7501e98caeb115f2ea49b0dde35c20cb96c3ee3e9fcbdca0645dec503e40a930919d413d8aa89bea142fc9612549a1
SSDEEP

6144:XNVa0+aHg29Xgx+uuKnt8/kuYKED1fMsQAOz00MRLAhkO:dAWHgar/kwEDCNAORMCuO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
343602c9dc1d3d10a02e1c28670ed1c5_JaffaCakes118

Files

343602c9dc1d3d10a02e1c28670ed1c5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 273KB - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ