38bf0d0f04f25c38e60796a62cbf5c89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38bf0d0f04f25c38e60796a62cbf5c89_JaffaCakes118
Size

129KB
MD5

38bf0d0f04f25c38e60796a62cbf5c89
SHA1

256d04414a8671ea23b58e9e272c75e8a3ca6cdd
SHA256

3ee72554940eb7b5c1b1da6836da4ed45d1a1689000ba6fe67772c8addf129e2
SHA512

376027cebb1f2004738e038e8e1c07bf7f26a627ed1220dd2a22be83d107b6e408019fe5c7e67e002a3573782fba7d2e5fa3b5721380ac5f139ac0bca85941cb
SSDEEP

3072:2/6kNR1WJSx3gbfnbmMzJxIU0L5KZ/P9c:k6IiSuXKU0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38bf0d0f04f25c38e60796a62cbf5c89_JaffaCakes118

Files

38bf0d0f04f25c38e60796a62cbf5c89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ