308900a5a98568d98884019e68ab17e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

308900a5a98568d98884019e68ab17e8_JaffaCakes118
Size

433KB
MD5

308900a5a98568d98884019e68ab17e8
SHA1

971c8fcc88095bf682eec79f76db2b6f3859fe08
SHA256

9e45c1e4e048530e2f553805b9dd723368e96087e87422fe00d2cd384846928f
SHA512

6b42af67b98b0262f37e203ffe1d3b3240906f4a0ab9a4927712867af625b39f691a55ca67da563c28ca6add74fdcdc76e456cd14f2f7af568c12ead2f53ecf1
SSDEEP

12288:TcTYZy/3IuOkDEGRo4IBnaeRdi86ZZZZcNg:Tcss/fOnGTIRDRdi86ZZZZ4g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
308900a5a98568d98884019e68ab17e8_JaffaCakes118

Files

308900a5a98568d98884019e68ab17e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 70KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ExeS
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE