3295cb644859af17b60a40fa14e349d2_JaffaCakes118 | Triage

Sharing

General

Target

3295cb644859af17b60a40fa14e349d2_JaffaCakes118
Size

31KB
MD5

3295cb644859af17b60a40fa14e349d2
SHA1

e03e19fcc4ee370a7a40406de922ba7c4fdcfd04
SHA256

b7be40109c50af52b99bf7e27c4a2d2b1b823f731b38cda403138f6696db2ee0
SHA512

f8c9c90244acf62b9bf7d5737c7b829518f776e134ef8f7b58d094e51489f5cf99c726e4ca93c2f94b7d9b7d1a0765b751b3d7b020f9f385d261e72c0e69f5b1
SSDEEP

384:6E+elGqMa71szUy03ytothYs6t/4zYO1YHS3IABalJHt/gahs5w/LnYsWL6gF:B+e4qZ71szU7L86TOy3I1PFs5vP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3295cb644859af17b60a40fa14e349d2_JaffaCakes118

Files

3295cb644859af17b60a40fa14e349d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ