30c0f6bf55f17a6dde98e4497c5793c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30c0f6bf55f17a6dde98e4497c5793c7_JaffaCakes118
Size

2.7MB
MD5

30c0f6bf55f17a6dde98e4497c5793c7
SHA1

a0d9b6d441dbc0821a57d9a446c8e3bb541d1b2a
SHA256

22ee78f1b182e23abd4056bd66e05aaed85a7fd0b45a2b624777e4b61d679a54
SHA512

68dabe6e7e7cd70dfb166f891b92cf2599728bcbcf8077801c7980c04ab954c9b671bf31953b235f9ed582bbb69d55b5fcfcfe81f96a195a98539ddd144dfec0
SSDEEP

49152:5m8qkvBALFdao57GhzAIxve4DVdyDIq4nw3Vx3PPGEg7zS2LO:A8d5A2o57GhzAIxW4jyDIq4e3nKW2LO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30c0f6bf55f17a6dde98e4497c5793c7_JaffaCakes118

Files

30c0f6bf55f17a6dde98e4497c5793c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 333B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 57B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ