f3c70e7157f34ba1b8c033feaa46d23a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3c70e7157f34ba1b8c033feaa46d23a_JaffaCakes118
Size

1.7MB
MD5

f3c70e7157f34ba1b8c033feaa46d23a
SHA1

c4c0bf3a6976058e5fb5eb25d020e215bdff42c3
SHA256

4e2bb9519cef9eafd85ecbb96b2617b36c930d3bee774a9445b99106c5b1feb7
SHA512

bb93e9917aed4d290c98e3a055db7bd821e70cd00edc52de73559cdb46eab7942eb4e93cbca4d9014e20d2f6ce6e073333bfa7714ba169cc680db95379c57c98
SSDEEP

24576:U2eHCyTHu32gjcbyDUomUBKh0t2ZN+5111111111+MUUYPCTpgKblcNue:UgyruNobyooNy2FHkCiIc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3c70e7157f34ba1b8c033feaa46d23a_JaffaCakes118

Files

f3c70e7157f34ba1b8c033feaa46d23a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 704KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 969KB - Virtual size: 969KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ