0370d26710cec00dfdb45a65c26e9767_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0370d26710cec00dfdb45a65c26e9767_JaffaCakes118
Size

506KB
MD5

0370d26710cec00dfdb45a65c26e9767
SHA1

da8543f42dcd74c629f71448aaf4e6e0f13f7587
SHA256

728cf59df2aac9f36ace0f05f1f340e22602a9fa7b192d7214d79ebe43ec2d48
SHA512

0d152b30cd5fbf670686ff39f1508eab80710eb33c2fc8f8dafd229579c12ab9f20dad621c22a94110eb790537e08f53cd30bd1e262e41eef1b85877d6e37cb3
SSDEEP

12288:AhR16M1ZRW60u8+G3INS6jez1ecwKyXP2wXP6+p:c31Zg+G3I7jeYPXPtXPp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0370d26710cec00dfdb45a65c26e9767_JaffaCakes118

Files

0370d26710cec00dfdb45a65c26e9767_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ