38e32436efad1c6427ed06e66f8b5de9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38e32436efad1c6427ed06e66f8b5de9_JaffaCakes118
Size

409KB
MD5

38e32436efad1c6427ed06e66f8b5de9
SHA1

25711bd5745002a1c6b6af34602e7585a90595ab
SHA256

e09098377ea8bba80fdd3e2c986fe32514f6113b307cb5d04eeafcb35b4b2e96
SHA512

3124cf51d08e68978caea88718005e7d6f88c4936a545511b40b89bfa2c3f47b6b2bdb74a719316dcbd1eceec10c34a251516bcc67c16c8c82802efef864c33f
SSDEEP

12288:uW0mD0ZfYF48lOpHWM9XDzOQedenFzUoF1WG4yGi:uzN048lOpD9TTmtU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38e32436efad1c6427ed06e66f8b5de9_JaffaCakes118

Files

38e32436efad1c6427ed06e66f8b5de9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xur
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE