General

  • Target

    b707d4b02e9b826d8f40d83b631f3ce8_JaffaCakes118

  • Size

    4.5MB

  • MD5

    b707d4b02e9b826d8f40d83b631f3ce8

  • SHA1

    71f30c2db1dda35326fb90f85e1985e87f559363

  • SHA256

    bcc65074b3d1f36509cd3d9eca01446a52eaffbddd19a1a4e9567ddc5f788eae

  • SHA512

    ae802b329a704e4f9a243aae32bfca44c6aa582dfb3f5e1717ad49e5ca6d1a2519eb402ffb7103b2cc1e99449ee0c736e18e30c4b19a132844b9c663893aec0f

  • SSDEEP

    49152:hP8PvXr9s2S0E/m5Br0T1m9unAlzFS5QrFc6I9poSVj5lIpo857kwUAStB6TSVJ:ePf5HBrUmZImFc99pDJPIpN5vUAS3VV

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b707d4b02e9b826d8f40d83b631f3ce8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    739246b4bb7cb3c7f0c4638fd540bda4


    Headers

    Imports

    Exports

    Sections

  • .data
  • .didata
  • .edata
  • .idata
  • .rdata
  • .reloc
  • .rsrc/0/RCDATA/DFSBJTC
  • .rsrc/0/RCDATA/DVCLAL
  • .rsrc/0/RCDATA/IFMSRU
  • .rsrc/0/RCDATA/ITVPCJHIUVTRFOM
  • .rsrc/0/RCDATA/OWHHNVRJWAJX
  • .rsrc/0/STRING/4079
  • .rsrc/0/STRING/4080
  • .rsrc/0/STRING/4081
  • .rsrc/0/STRING/4082
  • .rsrc/0/STRING/4083
  • .rsrc/0/STRING/4084
  • .rsrc/0/STRING/4085
  • .rsrc/0/STRING/4086
  • .rsrc/0/STRING/4087
  • .rsrc/0/STRING/4088
  • .rsrc/0/STRING/4089
  • .rsrc/0/STRING/4090
  • .rsrc/0/STRING/4091
  • .rsrc/0/STRING/4092
  • .rsrc/0/STRING/4093
  • .rsrc/0/STRING/4094
  • .rsrc/0/STRING/4095
  • .rsrc/0/STRING/4096
  • .rsrc/1033/CURSOR/1
  • .rsrc/1033/CURSOR/2
  • .rsrc/1033/CURSOR/3
  • .rsrc/1033/CURSOR/4
  • .rsrc/1033/CURSOR/5
  • .rsrc/1033/CURSOR/6
  • .rsrc/1033/CURSOR/7
  • .rsrc/1033/GROUP_CURSOR/32761
  • .rsrc/1033/GROUP_CURSOR/32762
  • .rsrc/1033/GROUP_CURSOR/32763
  • .rsrc/1033/GROUP_CURSOR/32764
  • .rsrc/1033/GROUP_CURSOR/32765
  • .rsrc/1033/GROUP_CURSOR/32766
  • .rsrc/1033/GROUP_CURSOR/32767
  • .rsrc/1033/RCDATA/CHARTABLE
  • .rsrc/1049/GROUP_ICON/MAINICON
  • .rsrc/1049/ICON/1.ico
  • .rsrc/1049/MANIFEST/1
    .xml
  • .rsrc/1049/RCDATA/EQHUYTYGAXGGPA
  • .rsrc/1049/RCDATA/FFQWWHA
  • .rsrc/1049/RCDATA/NBGSLGSIPUUVN
  • .rsrc/1049/RCDATA/OAFOVUDHU
  • .rsrc/1049/RCDATA/RYWUEIORYPGGQQW
  • .rsrc/1049/RCDATA/VBXFWPE
  • .text
  • .tls