039c1d89be3c310c3bdabe1dba09607b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

039c1d89be3c310c3bdabe1dba09607b_JaffaCakes118
Size

496KB
MD5

039c1d89be3c310c3bdabe1dba09607b
SHA1

f4385b042854c472eb2e63b4446cc99132754e3f
SHA256

d1fb40942cf8b3aa4b44f88840342f0e86d4d8a960207f66e185f1b7ae3116fa
SHA512

6a35eb55f5c87e924e747e141bdc2999c33e5b95cb6256d0e0b3e9a55df95891a502c0056e0dd7612c5edbed9d37da0c400a1b2a1ed2ff3e709073e76b3feb37
SSDEEP

6144:ZLLh4kJAEy6vDTe+lzonMyJO7byZD5dy+Of4CEVmyS3E0U9afOhy3Ke2wZTol:VykJAEy6vfYMtXyZCwCE7S3EQOaf2k+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
039c1d89be3c310c3bdabe1dba09607b_JaffaCakes118

Files

039c1d89be3c310c3bdabe1dba09607b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 418KB - Virtual size: 417KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ