38a8d3b04974834a1726c1a6d8827339_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38a8d3b04974834a1726c1a6d8827339_JaffaCakes118
Size

434KB
MD5

38a8d3b04974834a1726c1a6d8827339
SHA1

daa3ef2653da8adf0b689a1b04ec2966ec71415b
SHA256

1a357ac96496c8033de6d109e9ba4ed8048d7347b5429eb1d335ad06d615cd7d
SHA512

77c3df058ec54d099d8e6452fc8b310143dd9cc9b9b18a5e3949e65ab629f0bc681f5450e700d11dfc250f019e665059ed746ff975daced8f54bfac707905238
SSDEEP

12288:1Vd1+vqJcm84XNIuvCw9u2a3EO/mMClNfQWBVK:jU14XNIuC0uhE4yBK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38a8d3b04974834a1726c1a6d8827339_JaffaCakes118

Files

38a8d3b04974834a1726c1a6d8827339_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ