394fee2368376e33a03c42a0fd000a40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

394fee2368376e33a03c42a0fd000a40_JaffaCakes118
Size

3.3MB
MD5

394fee2368376e33a03c42a0fd000a40
SHA1

2915747d4d0cc31d25e1ea5f62d2806b348615f8
SHA256

5db30475117f1e06d252e2402a17bbb70b8b0410caf91cada44d97e05207d03a
SHA512

28983ed40630a11de1a816cd309de8502887302ef5f039b5d804dc3b8f8db437228f57fa279f0e5c75a8e1762ddf4adc222c554fcbaea8e688b370d598dfe21f
SSDEEP

24576:rrIT4uQlqw8YiZ4DMStaMeGkb/ZQ7I1h/rLhDdX5hib7xUdX5hd:rNwtuDjtaMe/n1ZLhDdf09Udfd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
394fee2368376e33a03c42a0fd000a40_JaffaCakes118

Files

394fee2368376e33a03c42a0fd000a40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 592KB - Virtual size: 591KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ