138dba353b41cfa2969ce7d4105c5fc6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

138dba353b41cfa2969ce7d4105c5fc6_JaffaCakes118
Size

363KB
MD5

138dba353b41cfa2969ce7d4105c5fc6
SHA1

9d84709388d4983c2e3eefb35024a692e5f202ad
SHA256

a85658c88797522db59461b9ff0e90e3db24d42c96bb180dde60a067fc13cec3
SHA512

5f825cfe9892bc196994e1acdc7d27c0ef957eb469a1698e859a77db5e6f7555ffb8b08cc63895bfca5e87b94ff047134124ab777b1fa986015b3d2c0b7d9960
SSDEEP

6144:XXYYM02igevVH0pwpMqKjRPIgBFs1znioxl9IJwXJnjMy3ki3ELsb:XXYYMQgevVH0ppqKjVtWxJJn4y3gy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
138dba353b41cfa2969ce7d4105c5fc6_JaffaCakes118

Files

138dba353b41cfa2969ce7d4105c5fc6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 349KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ