390bd862aad58b810e41ec42900374d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

390bd862aad58b810e41ec42900374d9_JaffaCakes118
Size

14KB
MD5

390bd862aad58b810e41ec42900374d9
SHA1

81d9a840cc80cc18ff124b052e3641d53d7c9658
SHA256

8585f8af7466998b677d0144629b565e00376a03df5b58dfd27b6619d4474098
SHA512

ccecb7b10e353690b0e00db6bc9aa7649b47de7f0b8961d3f171dc402809677c5665ac7982209db5b6993330129024c33544d63f0e52139e3758f424b2924842
SSDEEP

384:vOz/khGyyCMy8yujadY5eYm6hLMzvxeawW:KC38yujaml5yzvxei

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
390bd862aad58b810e41ec42900374d9_JaffaCakes118

Files

390bd862aad58b810e41ec42900374d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE