f3e4d1178cb0fe436e4bcece0ee69fb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3e4d1178cb0fe436e4bcece0ee69fb2_JaffaCakes118
Size

372KB
MD5

f3e4d1178cb0fe436e4bcece0ee69fb2
SHA1

826a60ddd4d51470853463ad536397621bf2d7ad
SHA256

f62042c7e5700ce8a90bb239582fa5879a5fb2bad2eee5a3bc0d12cdf1535596
SHA512

0fd80469c4b3f9ace2d98c8ab539f7c1e6e6b0c2a487ca20b80bcb76b455342f7eccc6c27728ca5e54a9ca5fe39a5c0b511c335a49fd133b0986157f7da3dbf5
SSDEEP

6144:muHS70+ajL1etU4DvaOfJ0s4nDWgRAkPRUGQn8xID0DMFZ2sS1nNp6OT1F/fUKm8:muSQ+afS1h8R3PRUGLxe0D9sS1DMXKN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3e4d1178cb0fe436e4bcece0ee69fb2_JaffaCakes118

Files

f3e4d1178cb0fe436e4bcece0ee69fb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 311KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 92B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ