General

  • Target

    a51c02e4d4eb5c97f6646b3ccffa9e70_JaffaCakes118

  • Size

    10.3MB

  • MD5

    a51c02e4d4eb5c97f6646b3ccffa9e70

  • SHA1

    7a971b2ec22054240ee9b461a6fc390b8128e7d7

  • SHA256

    1ac547d45a36526e8dce17ce15c30d65ea60b429323aac59ea11d39bd3fac1ad

  • SHA512

    d59635deb796e86098e3619e7889b6e3f58f5fb8ea90cf2512c44af11cd96925614cecd1c19c8ee036b4c0c3e88bb3140e82c9349cec51ad653568a95d30aaf7

  • SSDEEP

    98304:xaXw9eD88am38uvNDrUpbci60dq0z0SPdik:xaA9eDPX9Upvdq0z0WdR

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a51c02e4d4eb5c97f6646b3ccffa9e70_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    219be2aa827f30f5f10e3a5f98736ad1


    Headers

    Imports

    Sections

  • .data
  • .didata
  • .edata
  • .idata
  • .rdata
  • .reloc
  • .rsrc/0/RCDATA/DVCLAL
  • .rsrc/0/RCDATA/HGDGJDJ
  • .rsrc/0/RCDATA/IERRFW
  • .rsrc/0/RCDATA/KCOTNEFFHKEBCAV
  • .rsrc/0/RCDATA/KTHLHLNSHJEL
  • .rsrc/0/STRING/4078
  • .rsrc/0/STRING/4079
  • .rsrc/0/STRING/4080
  • .rsrc/0/STRING/4081
  • .rsrc/0/STRING/4082
  • .rsrc/0/STRING/4083
  • .rsrc/0/STRING/4084
  • .rsrc/0/STRING/4085
  • .rsrc/0/STRING/4086
  • .rsrc/0/STRING/4087
  • .rsrc/0/STRING/4088
  • .rsrc/0/STRING/4089
  • .rsrc/0/STRING/4090
  • .rsrc/0/STRING/4091
  • .rsrc/0/STRING/4092
  • .rsrc/0/STRING/4093
  • .rsrc/0/STRING/4094
  • .rsrc/0/STRING/4095
  • .rsrc/0/STRING/4096
  • .rsrc/1033/CURSOR/1
  • .rsrc/1033/CURSOR/2
  • .rsrc/1033/CURSOR/3
  • .rsrc/1033/CURSOR/4
  • .rsrc/1033/CURSOR/5
  • .rsrc/1033/CURSOR/6
  • .rsrc/1033/CURSOR/7
  • .rsrc/1033/GROUP_CURSOR/32761
  • .rsrc/1033/GROUP_CURSOR/32762
  • .rsrc/1033/GROUP_CURSOR/32763
  • .rsrc/1033/GROUP_CURSOR/32764
  • .rsrc/1033/GROUP_CURSOR/32765
  • .rsrc/1033/GROUP_CURSOR/32766
  • .rsrc/1033/GROUP_CURSOR/32767
  • .rsrc/1049/GROUP_ICON/MAINICON
  • .rsrc/1049/ICON/1.ico
  • .rsrc/1049/MANIFEST/1
    .xml
  • .rsrc/1049/RCDATA/BDOWGYM
  • .rsrc/1049/RCDATA/BGRAEVVVRIAWDYWLPO
  • .rsrc/1049/RCDATA/CDCBCVOQQNWJBL
  • .rsrc/1049/RCDATA/CHVHWFNWWMACQHYJ
  • .rsrc/1049/RCDATA/CMGOAVRGHPDUSDJLNERB
  • .rsrc/1049/RCDATA/DOOQMM
  • .rsrc/1049/RCDATA/INANMYVXIUXSSM
  • .rsrc/1049/RCDATA/JLWIHJM
  • .rsrc/1049/RCDATA/MXNDEHXKTIASUDRCJOP
  • .rsrc/1049/RCDATA/NIIQYNEMQUMI
  • .rsrc/1049/RCDATA/RLOOSWSB
  • .rsrc/1049/RCDATA/WKBLXKYBXKEOYIKKKI
  • .rsrc/1049/RCDATA/WXKDHGQVLGYQSQVQ
  • .text
  • .tls
  • WaTLBfPT