3643bc9a4dcd1c642436aca71632420f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3643bc9a4dcd1c642436aca71632420f_JaffaCakes118
Size

4.2MB
MD5

3643bc9a4dcd1c642436aca71632420f
SHA1

f0da4b409448fb390b7290071587cef617f6cece
SHA256

d7270a72c02216bb418ae5a6560c6bb7ff22c93a9b019965d42c5fdf327ccde2
SHA512

b31409fecaf3eb9cb9d9de592e83bbb6b193e5f93baea96911e16599c57fa2ac8a53c60f3bfd4047426b11aaaf7cf300bae9edfb5558122f61cd12a75e37bad2
SSDEEP

98304:mnON9fJh5b1CBCJddJg1f0rmNpLdspMD5RVxIZsM:1DfJh5WUA0rmNpLdspMD5RHYH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3643bc9a4dcd1c642436aca71632420f_JaffaCakes118

Files

3643bc9a4dcd1c642436aca71632420f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 844KB - Virtual size: 844KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 62KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 240B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ