03887e478c292d08479b127241de0aa3_JaffaCakes118 | Triage

Sharing

General

Target

03887e478c292d08479b127241de0aa3_JaffaCakes118
Size

1.1MB
MD5

03887e478c292d08479b127241de0aa3
SHA1

a10cc2ab476c332ca38d149566a31bba8c467182
SHA256

1ac47456ec852d3a7170ee19ec23eb6b056ea4b153dd9dca456219ee28baaaaf
SHA512

f70dc12bfb4c0ec536af81d55033501d37049e820017c587c07965aa6b0a0ff8d31968c373f60b62f75488cf13c5d1fc99eefe552c542b0322e19c7e43ec3280
SSDEEP

24576:b1b9LJ4vKNI4/WXbOXyRetx4Mm8JjuXODIfSG1ZNJWs+K:bjLIbKPx4qJkODIfSG1/JWk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03887e478c292d08479b127241de0aa3_JaffaCakes118

Files

03887e478c292d08479b127241de0aa3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ