385a43d7b4784c094c4be4189927442c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

385a43d7b4784c094c4be4189927442c_JaffaCakes118
Size

232KB
MD5

385a43d7b4784c094c4be4189927442c
SHA1

83e30251281cfd5c922b9ea82c7c74c769468894
SHA256

3b1c6de8873eae01a2afea7adbdd3d51be5afdafe02c368cd2e61f1749e5a6dd
SHA512

3c20387b595354b3638eec655b72b5cb9f93b9450cb515c0130edde41628466c10a00014fd80dc79803eb6d879e78db39ece52f1cb50c38b6aed3e98480faffc
SSDEEP

3072:NXbXgAZ4+2Q7glYe+34otMzpB9NyPEJaAjE/JFFaTws/UDcNRSrZwlK1Yo6:NXrgAm+2Qf4zNda9R4Ac6rZozo6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
385a43d7b4784c094c4be4189927442c_JaffaCakes118

Files

385a43d7b4784c094c4be4189927442c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 2KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.7n2s1t
Size: 31B - Virtual size: 31B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 836.0MB

.rdata
Size: 223KB - Virtual size: 224KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 16B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE