357ecbaf97016a9fec04340f6a37ddf8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

357ecbaf97016a9fec04340f6a37ddf8_JaffaCakes118
Size

331KB
MD5

357ecbaf97016a9fec04340f6a37ddf8
SHA1

a393d468e3d61062c357b12d03663ffc836560a6
SHA256

16ab0e461136dc25a2ca7d0e6cb037d26f7e0e03087eacab1252b9a2d357b248
SHA512

75981240021f88e278ef61336d6455eee0a0a92c84e54b1bcc5340db6ddc801a24579d6b280edbeb4af330f6b99b62471da5ed7bf3aaae8384a1f94850c42484
SSDEEP

6144:3i/E558kVvDI9rx+OxCxVZ6SyLiSNVyTZgkZThGMH4fH2CpnzNz5UM10r:y/ED86I9rkDyLHNVmukOfHnnz2m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
357ecbaf97016a9fec04340f6a37ddf8_JaffaCakes118

Files

357ecbaf97016a9fec04340f6a37ddf8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 318KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 505B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TLS
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ