30b0425214710aa14e053dafd85e2756_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30b0425214710aa14e053dafd85e2756_JaffaCakes118
Size

29KB
MD5

30b0425214710aa14e053dafd85e2756
SHA1

d3bc66be4b6d8ab56171b3ea2c9654de70c91749
SHA256

a177f355db65f9e0bfb75fa33d0e10e3915b520888ff9cb9209ad04ee1e78486
SHA512

d7c49a43284621515d686d523fe1dda37b65915db625fb9b0b3b422cde9cac3da510302eca0eb36bea8520a64c86adcfa2cd3605f97f6e4368eda19db735ddfd
SSDEEP

384:ga2+AQdfdZ3JbypyHFsnAeYGQn/6VKrjJVZlaJWmP9I/7iOpaKxI:QWdfdZAyHFsZYaVKrdVxmjij+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30b0425214710aa14e053dafd85e2756_JaffaCakes118

Files

30b0425214710aa14e053dafd85e2756_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 474B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ