372ce6bcdd7731ee303f75e52f872c59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

372ce6bcdd7731ee303f75e52f872c59_JaffaCakes118
Size

113KB
MD5

372ce6bcdd7731ee303f75e52f872c59
SHA1

a09a3ed0537e6907d91ed202ea8e1a58e35d967e
SHA256

6126ff45fbc268cba129d17b2f1a9c64e5a13629434dc22e9004ff46e2a30520
SHA512

f5c0fa2d6c1d51dca9f5bc5d34f01fe0deaa9fdacd625e0fbd430cbe2978157fbea1fd08016b82adac1ae3c3bbe4c60d1cb77f80ed98930a4e382cc93126a953
SSDEEP

3072:SgG1Eom2irIPUVjSZYVyapEcDZ4qFA4CGC3uLzp0:gFmcMjsYPEFaCGEuX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
372ce6bcdd7731ee303f75e52f872c59_JaffaCakes118

Files

372ce6bcdd7731ee303f75e52f872c59_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

_EnableInvisibility@4
_FollowTarget@8
_SetExplosive@4

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 234B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE