3eab73b2761aa2d288bd92706c49e619_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3eab73b2761aa2d288bd92706c49e619_JaffaCakes118
Size

912KB
MD5

3eab73b2761aa2d288bd92706c49e619
SHA1

4d81bfeff9485d63bd7c34a0722fa2f65e8c8ad9
SHA256

8cf743fb47c4b5fb0a76eda689d79642b591d275e84cb07eeb33272ce9dd2dbf
SHA512

7fbf4dc9b0774e5047360ead2cf6dd3cc9b9b988d9436a9e7ad975834889b9aff8605a4ed69ea138fca114b94c7e842841885b94293e1040a12e8f1eec57ab59
SSDEEP

24576:+lNZnUpar7L/cPrQT1DxKHGiAtbvSAdF/+1AOTNC:YNyuwQPhjh521JTNC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eab73b2761aa2d288bd92706c49e619_JaffaCakes118

Files

3eab73b2761aa2d288bd92706c49e619_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 754KB - Virtual size: 753KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 22KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ