3299f60bff85d585a8924f1daa63c415_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3299f60bff85d585a8924f1daa63c415_JaffaCakes118
Size

761KB
MD5

3299f60bff85d585a8924f1daa63c415
SHA1

5590b880ab77046ab95e51c7e3d20b52fcd032c3
SHA256

ebb86f1624f86cbf9d62821390f3038c80239adb511c7e7628806ff92be77962
SHA512

b30610dec5ddc8dfe639f0ccbf0e8447657ac4634799f4a2f6e8698c96630c6564fa4e54d2fd274dfb152a463e61a76982993b185cbaa05bb93b714fff835f89
SSDEEP

12288:Xpq5+LJazUG68qhyW5A5rEniKSNSVHrG1tvRQcIZbitw5UanDOxwmMntXAEJtSLw:AYLh0qhyW5A5r/KSQkbvmcIZbRmCntX9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3299f60bff85d585a8924f1daa63c415_JaffaCakes118

Files

3299f60bff85d585a8924f1daa63c415_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 660KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ