304ece70ec95f5bed7c43f246809f160_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

304ece70ec95f5bed7c43f246809f160_JaffaCakes118
Size

420KB
MD5

304ece70ec95f5bed7c43f246809f160
SHA1

2bafcc2abbc9cbf90662a2c78f265340e2cf824a
SHA256

7ac6d84e321533326cbe75de9a6904f50159a9e85f89e9bab56b4fb81d0e354e
SHA512

33487c3e8801f3c7a8c7f7c2943fcb8afe45061fcb781ff596b82c482515b641739751839d56277f21966def72e7063c6fd5fb07b7409f32905a3992c808425e
SSDEEP

6144:KivzqTecMT78v0P03e7X/a+GzH5cjNk+MPxJfMjCSI93a4kbGeaMKMl0:17qScMT7K07tUH5cxs/UjDIRTeaMKC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
304ece70ec95f5bed7c43f246809f160_JaffaCakes118

Files

304ece70ec95f5bed7c43f246809f160_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ