386df4b705a9a03c9f9e27e6fb875600_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

386df4b705a9a03c9f9e27e6fb875600_JaffaCakes118
Size

160KB
MD5

386df4b705a9a03c9f9e27e6fb875600
SHA1

ffd5533acc1dc56d4bc8ba675e299b1a14b896d1
SHA256

d057c59466c704bcd3c867f4dbd82299c071ff2746660cc1ad37d8aab46136f9
SHA512

eba40157642f9046d2265a6f3a4e49f2e6ed10f69cc644873b51a11e442a76c109e7a53a33be0e7739ae825aaa9d2460a14e4a8f9561056ff8725298b84b9769
SSDEEP

3072:8q3dVgu5WaYRPYRcIDMSGbNtulTvdVpQ97XgELWICQpqF0TTeLH956mGmXMna:GVygSGbNtulhVpQ5gECQp0qAWmlXMa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
386df4b705a9a03c9f9e27e6fb875600_JaffaCakes118

Files

386df4b705a9a03c9f9e27e6fb875600_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 289B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ