384f6a88d3ad69009364abbf0189fdf9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

384f6a88d3ad69009364abbf0189fdf9_JaffaCakes118
Size

957KB
MD5

384f6a88d3ad69009364abbf0189fdf9
SHA1

ea02c176b6efebae824e11abf5ced4468697e4f6
SHA256

c9a8bd88cd6249fd5d448ba1ec6712396d1c919b0429fa3b0f59bf3ac77f2c53
SHA512

7f64c1329ee3585c1ab77066e8d2029ecd89c5a2754bace602776ee2429dcdb9794fe2c07e32217225ad8135d271e1d3633df635545ea8370c6f2643bec91ba0
SSDEEP

24576:mfIC5wO+rtjj3Rlcy2HBh+jjM9/DY2v0XyE+fasf6:GCPrHlcbKjOkbI1C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
384f6a88d3ad69009364abbf0189fdf9_JaffaCakes118

Files

384f6a88d3ad69009364abbf0189fdf9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 568KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

w53sk045
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 195KB - Virtual size: 530KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bm6olccv
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hhi.jblo
Size: - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

c1eo1ve1
Size: 612KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

40oc5je9
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ