308921765ca5d93bc03e8eb44972e35d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

308921765ca5d93bc03e8eb44972e35d_JaffaCakes118
Size

678KB
MD5

308921765ca5d93bc03e8eb44972e35d
SHA1

3c0503f9c2a5b627b479a7ae2ab21fb67d2bddeb
SHA256

f5e539bae13ba05422b5dffdfbe4a0b17a3c7daa2c5dd843f7f5047dbd4db0ff
SHA512

7633f098f2b8fef6715df7e604843bbfe7a5294962966481c665db796446da728f9d47086f373e624d8b12e98c7223b61007143e95d73195e97391bfd15b7aaf
SSDEEP

12288:3BxamFeDoA3fgXaG1ZdX58+c5SH7EF2YOPWGCBEZrV3Va4F7QytKX:3aKeDvrG1rK/SAFzOPWGnRV3Va9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
308921765ca5d93bc03e8eb44972e35d_JaffaCakes118

Files

308921765ca5d93bc03e8eb44972e35d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 613B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ