General

  • Target

    f61221464a05da4a7993c462efad9615_JaffaCakes118

  • Size

    804KB

  • MD5

    f61221464a05da4a7993c462efad9615

  • SHA1

    b10d316e89c0f7df7f8b83880039d171fc0abea2

  • SHA256

    69d75c8edae302bdba8026f30d4e8fd1bc06c8366ee4c90fbc0f3eec763943f2

  • SHA512

    5212452408062b67c9dbe2257ba47bb9ae4846f5431e21bf5b7f41d2cf8fc18b8f07054ded20c38ca28ad97fd1a272cbacc6477303a9e8526a91ebdaa1843eea

  • SSDEEP

    12288:biS5U0BFavsPUkGXgDkmBxAJmKVg8zThh6XQ1HoOUAWfTq3Ni:XVXayLGwDJkJxVVzXIIHokWfTq

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f61221464a05da4a7993c462efad9615_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • .edata
  • .idata
  • .reloc
  • .rsrc/BITMAP/BBABORT.bmp
  • .rsrc/BITMAP/BBALL.bmp
  • .rsrc/BITMAP/BBCANCEL.bmp
  • .rsrc/BITMAP/BBCLOSE.bmp
  • .rsrc/BITMAP/BBHELP.bmp
  • .rsrc/BITMAP/BBIGNORE.bmp
  • .rsrc/BITMAP/BBNO.bmp
  • .rsrc/BITMAP/BBOK.bmp
  • .rsrc/BITMAP/BBRETRY.bmp
  • .rsrc/BITMAP/BBYES.bmp
  • .rsrc/BITMAP/PREVIEWGLYPH.bmp
  • .rsrc/CURSOR/1
  • .rsrc/CURSOR/2
  • .rsrc/CURSOR/3
  • .rsrc/CURSOR/4
  • .rsrc/CURSOR/5
  • .rsrc/CURSOR/6
  • .rsrc/CURSOR/7
  • .rsrc/DIALOG/DLGTEMPLATE
  • .rsrc/GROUP_CURSOR/32761
  • .rsrc/GROUP_CURSOR/32762
  • .rsrc/GROUP_CURSOR/32763
  • .rsrc/GROUP_CURSOR/32764
  • .rsrc/GROUP_CURSOR/32765
  • .rsrc/GROUP_CURSOR/32766
  • .rsrc/GROUP_CURSOR/32767
  • .rsrc/RCDATA/DVCLAL
  • .rsrc/RCDATA/PACKAGEINFO
  • .rsrc/RCDATA/TFRMMAIN
  • .rsrc/STRING/4076
  • .rsrc/STRING/4077
  • .rsrc/STRING/4078
  • .rsrc/STRING/4079
  • .rsrc/STRING/4080
  • .rsrc/STRING/4081
  • .rsrc/STRING/4082
  • .rsrc/STRING/4083
  • .rsrc/STRING/4084
  • .rsrc/STRING/4085
  • .rsrc/STRING/4086
  • .rsrc/STRING/4087
  • .rsrc/STRING/4088
  • .rsrc/STRING/4089
  • .rsrc/STRING/4090
  • .rsrc/STRING/4091
  • .rsrc/STRING/4092
  • .rsrc/STRING/4093
  • .rsrc/STRING/4094
  • .rsrc/STRING/4095
  • .rsrc/STRING/4096
  • CODE
  • DATA