3181ddc2a3eeeb7b8d714faacf9bf60f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3181ddc2a3eeeb7b8d714faacf9bf60f_JaffaCakes118
Size

1.2MB
MD5

3181ddc2a3eeeb7b8d714faacf9bf60f
SHA1

c8e231060d1e0991b3899dfc4499695bc2cbb75a
SHA256

df8eb10d40cc7646b7816d89fa378453ea200559c359a1a892455c9ae2f0ec09
SHA512

a839c0046a1b7e205d6aa713d5e2a757fd43519930eafc833215a16809219049799555d28f578442492dbe2e4811032052778d9e6f5f137b6e7deb223519f342
SSDEEP

24576:x5fPugMOVBvWEe7yFO/qi/NXNfGCjSLmwsNPd3Rg5:zuRy1zCyFO/jNd+CjS7sNlK5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3181ddc2a3eeeb7b8d714faacf9bf60f_JaffaCakes118

Files

3181ddc2a3eeeb7b8d714faacf9bf60f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ