380e7fef25e367c0708d91f120508e91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

380e7fef25e367c0708d91f120508e91_JaffaCakes118
Size

293KB
MD5

380e7fef25e367c0708d91f120508e91
SHA1

d8a0ed65de8195f758b388d09f26a6b573240408
SHA256

1d3ba128452e253fe1dcadeaabf3eb635c5af2b3c8f21dabcfa3fafc6efc8eb9
SHA512

a161c55712e82c5248a8dea93adb945148d5850dd9ae7b6476fb16ebc015eb946f794b5d78113d9ee7f8369d180df5552776f522ed95ebbb0257f3b4556766de
SSDEEP

6144:S6VkbX9F+EQOVabKFmKp1n7Ik/odzq8JPDJkMnhLwPbpAbpHUA:HEUAIk/4zq8JLOUhLwPb6bpHUA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
380e7fef25e367c0708d91f120508e91_JaffaCakes118

Files

380e7fef25e367c0708d91f120508e91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ