39a8ec8d7d5c66e8736dac539bece2d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39a8ec8d7d5c66e8736dac539bece2d1_JaffaCakes118
Size

588KB
MD5

39a8ec8d7d5c66e8736dac539bece2d1
SHA1

25b232adec0b7e72073395bbafd9f91f32d0da8e
SHA256

b01042c0fa17ea630fc1a98c6a6eeda7bc3c9967aadb1fd1513bcf9f06c13892
SHA512

8dbf1b26826d97d5d21d6756ed28a221b125f7317d4a3a24446980d2f69a88a4fb97281cb19241747d7d18eb72baccbad2544709c7684a06272debcfb4ada7e2
SSDEEP

12288:ekwTpD7+TyUI7KAAKQ1G4Rqx5gZnTAMFmrUvy7Ts8vob:sFGTyFDQ1G4RqxYUU8jTZvo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39a8ec8d7d5c66e8736dac539bece2d1_JaffaCakes118

Files

39a8ec8d7d5c66e8736dac539bece2d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 498KB - Virtual size: 497KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 28B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ