30fbe0796e0e3bc7e5d6da9dfba405e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30fbe0796e0e3bc7e5d6da9dfba405e8_JaffaCakes118
Size

911KB
MD5

30fbe0796e0e3bc7e5d6da9dfba405e8
SHA1

5e2959c8e1ff5121ecee35ddfd4401fd4629ede7
SHA256

8b4e8509baab1145d86582a4b0d988e43c375b61e80567d4398926f47ff36ce8
SHA512

13b7e051b1942a499c2e99f52da7a9d57548ee831fa8702b59e50b40a6f169cd334c331b2dcd5da8439b248340fa6015485df89b80f833557cc7cc7689557fad
SSDEEP

12288:Of78UsopGebxyZCGM/5HX4XrShuyBpw4:Of76opNy0zpX4OwyBpw4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30fbe0796e0e3bc7e5d6da9dfba405e8_JaffaCakes118

Files

30fbe0796e0e3bc7e5d6da9dfba405e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.itext
Size: 12KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.const
Size: 503KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 343B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ