39807e582e25133f9b92d2989b5f58a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39807e582e25133f9b92d2989b5f58a3_JaffaCakes118
Size

368KB
MD5

39807e582e25133f9b92d2989b5f58a3
SHA1

687c33f28d7240a66dab739bceaa3450146f5b08
SHA256

8f5d4856fb7ab6cf4f3360160651df1aab53495affcae72fd0d741899535f4b0
SHA512

89ec07bf62757b2d45a9c98655160744458ccb6888b7f2678af640a40e8504432462c5d2e9b41f8bb7f0a3332ecdc7c81d57ef580c519c86ef7e78af4fdaff32
SSDEEP

6144:dHOr5CO8rdaqYZ/wstNZ2t2dJpD+th1I5w6+ylwKJGucilAq4Wxol:NO9CO8rcxBX8slSth1QlFGmAq4Wx+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39807e582e25133f9b92d2989b5f58a3_JaffaCakes118

Files

39807e582e25133f9b92d2989b5f58a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 307KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 55B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ