3074e80c68b3a2a19530b191fdf69c25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3074e80c68b3a2a19530b191fdf69c25_JaffaCakes118
Size

173KB
MD5

3074e80c68b3a2a19530b191fdf69c25
SHA1

1ef8355e8bbaeafe463dc8a14cbe107d4f892a14
SHA256

181df6575bbf0dbad5a40c4b87c786f6e5e54defb3d454f56900e7acc53ad82c
SHA512

804a42a80d7adaaaa07a7e157bf61562566e0be45f298a6a19d6085c9cc3ce186d21f07367fa78115b3f0dadf098c4ea986dc0cf54a5d70a352c932de34fff59
SSDEEP

3072:XVnmlRjQ3kRTdeuSvVMkRo3uQ+5SnSz4W++xvUkQy8AvU+00HDwMd+D+SfF2i9:BmYaTdgyn4bvUk989DMwJDb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3074e80c68b3a2a19530b191fdf69c25_JaffaCakes118

Files

3074e80c68b3a2a19530b191fdf69c25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ