3696cb439d748a72248d0a8e43968fbb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3696cb439d748a72248d0a8e43968fbb_JaffaCakes118
Size

75KB
MD5

3696cb439d748a72248d0a8e43968fbb
SHA1

ba4e91c2ec6bf7131a23fc904cd77adfcfacc1da
SHA256

cb86b663b7909ed7b68d95be72e2451742586f9141e84bd41fc3d17ad8971b78
SHA512

25c6648ce2f9621c4f00f7a1bbf9a604ef0ffe78aff973e2df1063da025e8f70aad8d6b7ae370dc3a9b2a8aed19dde44b9527780fbf485524b246d7172a535e3
SSDEEP

1536:7Fv504wLiIFuKc0kQa+tSmKwnCRXB5hFdhdroxIMt/sCEdVbVRynbQ:7D04wLiIFuKfk0tSmKwnCRXj3dhdrqlO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3696cb439d748a72248d0a8e43968fbb_JaffaCakes118

Files

3696cb439d748a72248d0a8e43968fbb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 276KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ