3372989b7976f63146e22f6beb5f6d37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3372989b7976f63146e22f6beb5f6d37_JaffaCakes118
Size

2.9MB
MD5

3372989b7976f63146e22f6beb5f6d37
SHA1

a12fa03539ea69d3e1c360fa35e899956ca63a16
SHA256

8e434a07e4aa3e1f86a8a0974d34e8316568ccb787f803bc200dd6d804b72f76
SHA512

3c339e2b919eb30e343aefa1b14225e2588f9b93a77707de50eb47edd746a85d7fede6412e6849c1681836092809d6b90ebefff9c0589e94548837e19c08e0c4
SSDEEP

49152:jL3PS6HE8aes3A/2e6kpILYrKAxVqaMFwIk+ywbk49JrGrN3Ip2f:jLa8E8aeye6UxoOVV47rG9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3372989b7976f63146e22f6beb5f6d37_JaffaCakes118

Files

3372989b7976f63146e22f6beb5f6d37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

WinLicen
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE