38fc6bde6cb34f45a3e63200b579a364_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38fc6bde6cb34f45a3e63200b579a364_JaffaCakes118
Size

20KB
MD5

38fc6bde6cb34f45a3e63200b579a364
SHA1

786b17030a00b779bec08273dc0a5f9b5c39b6a3
SHA256

4a018ae5cc5a9524f4e6347c31848b5e6135422ecfa0c547a6e1fd8a05a5885d
SHA512

4b62d8339503024e5e2bf3c3c321e1500b6b93b33b250bd07a05fa49cc01d7a936d017e68a255263cfb949e19ffc7bb8770b59872a2927a2cfe6a516d41dfb0c
SSDEEP

384:6x0CGxqjIHG0Q2eMRXaDhtDyn3yl2pMLey6dLdDAi2hJmXBaDsbruH2oru:LCKqjH0QZMRg1yxpNy6dxDrec8o3Y2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38fc6bde6cb34f45a3e63200b579a364_JaffaCakes118

Files

38fc6bde6cb34f45a3e63200b579a364_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ