39cf79e4421116e9baa00263aa413c04_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39cf79e4421116e9baa00263aa413c04_JaffaCakes118
Size

386KB
MD5

39cf79e4421116e9baa00263aa413c04
SHA1

47d3230d164092861b37ed01c29b23a0cb30ed5a
SHA256

671181d894fce1a90816d1d25e3c393e34650da546b1f4b07095759e9280e977
SHA512

02b90277b54f57e200370d7792b181560eaa18d13796ebea4309be3ec9497357fb4bfa525e705671d5891993f5d464776770d6c55ba5a3cd4a98f250c857333d
SSDEEP

6144:k6uX1R7sPIbPEzCKRygrmY52ToavOjPGuHR4nUEY2pkNw5hmgTN8aMKX2hGDl:Rq1RsPIbbKTK27xbokN49MSnR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39cf79e4421116e9baa00263aa413c04_JaffaCakes118

Files

39cf79e4421116e9baa00263aa413c04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ