38a61b970305ec38872d3a08b31abe71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38a61b970305ec38872d3a08b31abe71_JaffaCakes118
Size

190KB
MD5

38a61b970305ec38872d3a08b31abe71
SHA1

f6ec2d75956ff2bb2968a985e115b27755dbb08f
SHA256

2f7563d7f5e493412a6cadd094642f696ca9f5dafe2c13ada6544e8714738421
SHA512

5b9f8bb442b16e97bf7e225a980f823703542a4c385f033ef299fd1ef4d3463650fb78b64e034ac3bcb4aeb48ebfd884325070d4bf3e20c69cc72ed1fcf943d5
SSDEEP

3072:7ADWla3BQtg37Vq98+jsHJ3u8VnNtnprNydfSeYdQXpUaqQKXeMcYuXOtquhX10B:03mmJ0XjsHJ3uUNhgSLQXTXKXeMAwYb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38a61b970305ec38872d3a08b31abe71_JaffaCakes118

Files

38a61b970305ec38872d3a08b31abe71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BSS
Size: - Virtual size: 277B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ