399b357c4e0ce4babbf3dcad774613e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

399b357c4e0ce4babbf3dcad774613e2_JaffaCakes118
Size

2.3MB
MD5

399b357c4e0ce4babbf3dcad774613e2
SHA1

40e840d2a36e8691d380dd38f0f2245fd9f5a2e8
SHA256

e33f9234e56e3f1c17d243116abe3c13e4eab9d6c44b22215f4445a17af637e9
SHA512

175a8288c121deada931149adaf6dda06479bf35acada488f4da046601662708155c6b0cbdbb3e45dc63386cd92b93f27518b547e7d90cdb4d6884119d872fc7
SSDEEP

24576:zZqKsCAP7l4qzok/f7U9AEz/6x3GQh1qi9FPguU6HP+/NvePsfk13iDcLNnQSdpr:ZkDX/19O5K2lnfk1IYdHZWmW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
399b357c4e0ce4babbf3dcad774613e2_JaffaCakes118

Files

399b357c4e0ce4babbf3dcad774613e2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 23KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ