General

  • Target

    b13f3493d482db6f7e503d18411a56e9_JaffaCakes118

  • Size

    4.5MB

  • MD5

    b13f3493d482db6f7e503d18411a56e9

  • SHA1

    f8a2bae07e9aaf1c1ef1fa8598b420805a5813df

  • SHA256

    3b71bd961219a0dde9af65248710d8ac725f4be31d08c5d3c4843803b41a6bd0

  • SHA512

    5984040b4c191b51ce3ea1d436db1e92eb78f106663457d24e3a89133249d6c39a58c66a38a2ac41fd9ef5a2b7b75147ded26133af5ac45cea3661da1f42becd

  • SSDEEP

    98304:TOMgD4tm+LJBZrTcj2tZha/ujJRmXma8n1:KMgD4tNLdTc6tW/ujCR8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b13f3493d482db6f7e503d18411a56e9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    739246b4bb7cb3c7f0c4638fd540bda4


    Headers

    Imports

    Exports

    Sections

  • .data
  • .didata
  • .edata
  • .idata
  • .rdata
  • .reloc
  • .rsrc/0/RCDATA/DGATBUSUWVQY
  • .rsrc/0/RCDATA/DVCLAL
  • .rsrc/0/RCDATA/SBWTMY
  • .rsrc/0/RCDATA/SOSPYCI
  • .rsrc/0/RCDATA/YGOSKJEKLLOBHCC
  • .rsrc/0/STRING/4079
  • .rsrc/0/STRING/4080
  • .rsrc/0/STRING/4081
  • .rsrc/0/STRING/4082
  • .rsrc/0/STRING/4083
  • .rsrc/0/STRING/4084
  • .rsrc/0/STRING/4085
  • .rsrc/0/STRING/4086
  • .rsrc/0/STRING/4087
  • .rsrc/0/STRING/4088
  • .rsrc/0/STRING/4089
  • .rsrc/0/STRING/4090
  • .rsrc/0/STRING/4091
  • .rsrc/0/STRING/4092
  • .rsrc/0/STRING/4093
  • .rsrc/0/STRING/4094
  • .rsrc/0/STRING/4095
  • .rsrc/0/STRING/4096
  • .rsrc/1033/CURSOR/1
  • .rsrc/1033/CURSOR/2
  • .rsrc/1033/CURSOR/3
  • .rsrc/1033/CURSOR/4
  • .rsrc/1033/CURSOR/5
  • .rsrc/1033/CURSOR/6
  • .rsrc/1033/CURSOR/7
  • .rsrc/1033/GROUP_CURSOR/32761
  • .rsrc/1033/GROUP_CURSOR/32762
  • .rsrc/1033/GROUP_CURSOR/32763
  • .rsrc/1033/GROUP_CURSOR/32764
  • .rsrc/1033/GROUP_CURSOR/32765
  • .rsrc/1033/GROUP_CURSOR/32766
  • .rsrc/1033/GROUP_CURSOR/32767
  • .rsrc/1033/RCDATA/CHARTABLE
  • .rsrc/1049/GROUP_ICON/MAINICON
  • .rsrc/1049/ICON/1.ico
  • .rsrc/1049/MANIFEST/1
    .xml
  • .rsrc/1049/RCDATA/ACTFJQTXIIMCAN
  • .rsrc/1049/RCDATA/FITLEWNWKLWYHDYWYFX
  • .rsrc/1049/RCDATA/LLPROQSGHHJTDJHEI
  • .rsrc/1049/RCDATA/VAAJCYVHFFHGT
  • .rsrc/1049/RCDATA/VNCCGTQKHT
  • .rsrc/1049/RCDATA/YMXORJOF
  • .text
  • .tls