379fb050995fcf1a6b0cd1191d2b9383_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

379fb050995fcf1a6b0cd1191d2b9383_JaffaCakes118
Size

140KB
MD5

379fb050995fcf1a6b0cd1191d2b9383
SHA1

738a927f6e115ab2978c527ba767a95c8eef1733
SHA256

95aa26ec9f88a177fe1df27bd6f2c7c3204887e95a9dba5f8c9b0e91f2d00961
SHA512

061b02752c2e3b07c7857f943e8b3fd07206796d2928c4c981371a730cad74be2e01d12e7b8aa9e2117db989e0e03b42b79e7b3a309ccb0155dd8f1c2ddc0cdc
SSDEEP

3072:+4wHjcNLKw4WSe1D21Pqejf9L96e0nwgw6cqf/K+zAmfM9:UCmpeaqe/6e0S6h3fAC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
379fb050995fcf1a6b0cd1191d2b9383_JaffaCakes118

Files

379fb050995fcf1a6b0cd1191d2b9383_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ