305c15ff50a421e35862181ebb554c8e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

305c15ff50a421e35862181ebb554c8e_JaffaCakes118
Size

249KB
MD5

305c15ff50a421e35862181ebb554c8e
SHA1

e464db878575559415f4f7a6f37195214b808413
SHA256

9b212590962e494b7c4a54656f9e626f2340570458dab239bf42ab20786b8c13
SHA512

480e41c908d8c4ada4a04db72d8f42a90554759f87c827c423773e6c31d874504a0bc0bf31da6d2688f7fd0fffc63007cb9f2eb385f31882df41b803692b4c05
SSDEEP

6144:nTeiNteRnkEUNhzF/kvAGaMlsqdiVWD986LWBVegfSr4IPBq8:pNt6kDhzmhaMlvdv98aWBVegqr4EY8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
305c15ff50a421e35862181ebb554c8e_JaffaCakes118

Files

305c15ff50a421e35862181ebb554c8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 516B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 219KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ