39a45481af6f2c23a8dde49559e575c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39a45481af6f2c23a8dde49559e575c3_JaffaCakes118
Size

2.2MB
MD5

39a45481af6f2c23a8dde49559e575c3
SHA1

8b1c18ed3cebfd099b5aef8509de5715c23596cf
SHA256

ea32cd0f21ecda3ea012ba527d801ad123d4d3ff44336c4877eb247dc6f266ff
SHA512

ce037351370913908b0dc194344abaa256b97d4ed778d2473bb66f0fa0eaa3498e5762156e79eadd09011bd48e94f8a3bfbc7044fb518dddc93b13e7853d468d
SSDEEP

49152:0ExjmExjCogs/Yunup+6Yu+ZBQuzQaM/o0mNPDbZ1kE2x8G:jxjpxjNlh6qZBPzQaMQTDNeE22G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39a45481af6f2c23a8dde49559e575c3_JaffaCakes118

Files

39a45481af6f2c23a8dde49559e575c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Obsidium
Size: 512B - Virtual size: 9.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Obsidium
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE