3082a9323f05442ccf6e14049dd745bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3082a9323f05442ccf6e14049dd745bb_JaffaCakes118
Size

13.2MB
MD5

3082a9323f05442ccf6e14049dd745bb
SHA1

f920ba77a9230803e96ad68ddc4f031c20998c21
SHA256

c628c4557a49d523670480fdc132883749015d533db240089b0a081ef5c445ea
SHA512

6c532e38c20a74f02c0b8a63502237dae1177d4d6f2b5f5acbdc5d938140ba747f116e7f6e0e9532bacab2e89512843e0ca8c4427cd591faa09829d27d7e5b0a
SSDEEP

49152:wxpZChee7hnQey+8TVfWdzjd9Tli4F1pV3203HCnBTaXMdYrkTcH:wxcUfW1i4Fjl2gUBTaXMmrg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3082a9323f05442ccf6e14049dd745bb_JaffaCakes118

Files

3082a9323f05442ccf6e14049dd745bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12.0MB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ