3a477a4cac97056f9f2ed1e517f25f00_JaffaCakes118 | Triage

Sharing

General

Target

3a477a4cac97056f9f2ed1e517f25f00_JaffaCakes118
Size

340KB
MD5

3a477a4cac97056f9f2ed1e517f25f00
SHA1

cb39d60a830288818213ae550cde14d070b9a0d5
SHA256

f9fe3dafa329a6dee118fa58c8f4b5e09f6a1ddc872159762a338a144b9857e8
SHA512

d40d84842540fedb0febcce293798b918e8fb6b4075f74271f47389e03f47597ea6c123797d87b33035ad7496bdae0ac06d758f0f62a257095f2186198bb7c8c
SSDEEP

6144:SZ6LzOTyFmrGlVZ4jILEKb+4Ve3QPqfSYYKDP1oEWSw+ZmVKp8x6kg7kxZvi1Se:M6LzOmFmrGrZcILEe+4VbPqwqPKGw+Zx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/sample

Files

3a477a4cac97056f9f2ed1e517f25f00_JaffaCakes118
.gz
sample
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ