438e60ee6c85e96ff025b345bba3fe69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

438e60ee6c85e96ff025b345bba3fe69_JaffaCakes118
Size

305KB
MD5

438e60ee6c85e96ff025b345bba3fe69
SHA1

90532d18e7aa277d7f03660150e0681d54b5aa15
SHA256

348684b4c86d6c65d70aae828aabe5231e80fcb8fdb26858fed749217a933ff1
SHA512

fe6ec863bb17c51ce5b410ae7d5198829643cc6684980e6cc414dfb2acc5c462b761474f52255d318567e27a468774dc9f6eb3941497a61236e6e3ca9d4b96dc
SSDEEP

6144:s9qHDNXUepFTCdCRTy7wzFzRODpyUOr2//g2TnLo0D0:4qRU4wCvxzKy1rc/gs6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
438e60ee6c85e96ff025b345bba3fe69_JaffaCakes118

Files

438e60ee6c85e96ff025b345bba3fe69_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE