c3c3e42cf2f05027493301bb0d3c0bee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3c3e42cf2f05027493301bb0d3c0bee_JaffaCakes118
Size

199KB
MD5

c3c3e42cf2f05027493301bb0d3c0bee
SHA1

3a03c85b60a9b051ee2bd6e6afb9e30bf373856d
SHA256

b17c60368d86e1f620942626a9389060eed637c4656ab2728fc2c94f2dacb4f6
SHA512

f4d3c44a8977ced66dc676687160801db4cb3694f2e5c4830b1f690e3adfb68536720f7fb2e84e8b7d1d7d659859b20783bc8778e35e5f4feeca016fbdcc7b8c
SSDEEP

3072:qKtfDwsjPThTYszDH2fWw9J3NWjGCLOwstyhZFChcssc56FUrgxvbSD4UQrO2z8:BtfDwsjPThT5zL2t9RNgShcHUaz8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3c3e42cf2f05027493301bb0d3c0bee_JaffaCakes118

Files

c3c3e42cf2f05027493301bb0d3c0bee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 52KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ