3697c1974803b0b8e4d60b5fe6017bc3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3697c1974803b0b8e4d60b5fe6017bc3_JaffaCakes118
Size

843KB
MD5

3697c1974803b0b8e4d60b5fe6017bc3
SHA1

118ff3968473665c360efffc89f34d985a931632
SHA256

0a93cf85a79cd7d076147ce2344faebdfb76fc620635590eea18fa330c94503c
SHA512

2955114a5d5ef4ac393a19b5c24d24609ad7d8938a73674dde4c3fdcac4ae4ab4d162cdc20f1e1f08fc84042cd24d874c8cf98366354a83d3704de7c1c91c9f6
SSDEEP

12288:/44vPLiD7CRfXYzwEihVlJTgv5+/WI8mkGKJcAOzunHpSYOSKIbNTBTMT7rL5YEk:BGD7CJYk3vzU8eI85GGRHwSb1MrLZj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3697c1974803b0b8e4d60b5fe6017bc3_JaffaCakes118

Files

3697c1974803b0b8e4d60b5fe6017bc3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 1KB - Virtual size: 868KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rtss
Size: - Virtual size: 3.0MB

.engine
Size: - Virtual size: 480KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 693KB - Virtual size: 696KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE