399e144d1ece0b87c6f6d2a0f5eb5205_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

399e144d1ece0b87c6f6d2a0f5eb5205_JaffaCakes118
Size

148KB
MD5

399e144d1ece0b87c6f6d2a0f5eb5205
SHA1

af0d77b3eec0a3891775de47f988ea8c04eb99a9
SHA256

bae639e207f29df6898af76ba1016e730c59f0937a45b9e1ae47a925ec6e8b6b
SHA512

1b059bf12ad2efd4655c0843bde0714baa296d0c57f6ad0444d61adc200034c587345a7bc7f42e989cb210980f14e06ddf6490fdb13542033bd2fcf78361a777
SSDEEP

3072:ZSCcW8hywakr39rAbU/XYaDJy1St9x2bANkgXyL6oILtYvFIy:ZSg8hywasIaB2cKLULte

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
399e144d1ece0b87c6f6d2a0f5eb5205_JaffaCakes118

Files

399e144d1ece0b87c6f6d2a0f5eb5205_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ