349577e841e21bc3baf10e332c60bf85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

349577e841e21bc3baf10e332c60bf85_JaffaCakes118
Size

1.2MB
MD5

349577e841e21bc3baf10e332c60bf85
SHA1

6f51d7c3df83b9890bc8001c8c2e62650aa386d4
SHA256

104d3a7fc8ce4b3d3ba6e032ad934512c94c99d1147e4417fa3f343e5e438458
SHA512

bd06ee656d556deb56060db6e7fe4007e477a6cd861dcb42daf278df6d2c479738a8d958e5a5e6354921a7a03d4c8045dc8fc1598cbf9e5c75fd2114f46e4da0
SSDEEP

24576:Oe9qt8qu/MGYxmp2bAjs2wfi3HyVCfcadyjsi5WLT6w:ObdhyKfi4CfSaTF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
349577e841e21bc3baf10e332c60bf85_JaffaCakes118

Files

349577e841e21bc3baf10e332c60bf85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ