38dd5213ee52f21e9ad53b1723fb4e8b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38dd5213ee52f21e9ad53b1723fb4e8b_JaffaCakes118
Size

327KB
MD5

38dd5213ee52f21e9ad53b1723fb4e8b
SHA1

80d60a2623cb22cf85b9770c5b651aec6c14365d
SHA256

4d4fa8f3970054a819e8ce5d36d31a176564baaf4a3cd3373f6a6d8474cecdb2
SHA512

176d789dba5f2fd76f92081af07dadf5bc9896dbba7d024afe619325f6e9f94b21121f4fac0524097a00a24ef53bb7bba9f394fe93f85f59abd81759a901a742
SSDEEP

6144:c+foQYPfVXOxw3MMsS1vA6tuTE4cKVuNOk/QIzvkFw/Qylq:LoQY3VXOK3nj1vAOAgAoDvPoY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38dd5213ee52f21e9ad53b1723fb4e8b_JaffaCakes118

Files

38dd5213ee52f21e9ad53b1723fb4e8b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Hkop.cn0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Hkop.cn1
Size: 287KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Hkop.cn2
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 227B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ