38d3ac050f1b10cd49ca0ed2107fb8fe_JaffaCakes118 | Triage

Sharing

General

Target

38d3ac050f1b10cd49ca0ed2107fb8fe_JaffaCakes118
Size

907KB
MD5

38d3ac050f1b10cd49ca0ed2107fb8fe
SHA1

978ff4e476640e3373c2e598fa3897a3014d1d85
SHA256

29ca218bfab91f2b5974244f9d469275fa9c5f6c18bb9ec4e090f18e5a511afb
SHA512

8eaee2a401e24139d9b37e3cbde48948056db4f746b49f0cf7f3e51e2ea0cf3935808d273401549f69d2b8a285e037b4096213321d016d81a0e79108805e1871
SSDEEP

24576:zw5Rzhj7Nc+FdeuXNGzC1QMaO8leGMGa/ZS1:zARzjPFdeu9gC1QbTeGMGgS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38d3ac050f1b10cd49ca0ed2107fb8fe_JaffaCakes118

Files

38d3ac050f1b10cd49ca0ed2107fb8fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 720KB - Virtual size: 719KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ