3172bb2dd89477ecb3322fe400fd23dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3172bb2dd89477ecb3322fe400fd23dc_JaffaCakes118
Size

921KB
MD5

3172bb2dd89477ecb3322fe400fd23dc
SHA1

949f52a1e39e6cbcef872ca24372924f3ea21466
SHA256

1843159ed9997d29a0da87941aecd56d0e75c76e0baafdf18abb13067d959585
SHA512

bd699df3e3cf163bd980012dbffb17f28d0aa4a20aa19727084f2ef0678a8243e2bbbd1c0d43066d9b3afd102c40c232e08907996e302e7ffc6cc280ed39678d
SSDEEP

12288:8M6oBVqYc+OE4rUgiVaEr3RuhFJBGo3tfJgp089iatKkL4giZOf5qkLTTTcRpGzl:t6ilcVlvEbcnBGo3xGV9bBLsA5qoY6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3172bb2dd89477ecb3322fe400fd23dc_JaffaCakes118

Files

3172bb2dd89477ecb3322fe400fd23dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 708KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ