395465e58a70cf4a66aeacb4bf9a1700_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

395465e58a70cf4a66aeacb4bf9a1700_JaffaCakes118
Size

180KB
MD5

395465e58a70cf4a66aeacb4bf9a1700
SHA1

100d44db50d1f326d1cac5cbc2001cd77ec4049f
SHA256

de0696077b88318f8abe3791cf470d973de29735463d83ac6f794a88cc6a30bd
SHA512

cae3a0052cd600031d7aa77bb9a01dcf7bd1466fdef803ffe66b382b224f16c312ece62653f259977a2deab6ddf2a39c7a8e685ac53e44b56df9dbdc03099038
SSDEEP

3072:XgL+oZYE/Uk6b+clMJB5mWqfJOCrwEUqX1xRipB58bl7DWIa3gVx5eGTrhppU4:QLhmE/YldQCMEUug50lv065NbU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
395465e58a70cf4a66aeacb4bf9a1700_JaffaCakes118

Files

395465e58a70cf4a66aeacb4bf9a1700_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ