3416404860d364807e2c6c5a8c20bbb3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3416404860d364807e2c6c5a8c20bbb3_JaffaCakes118
Size

221KB
MD5

3416404860d364807e2c6c5a8c20bbb3
SHA1

bc7315d2bb808e5fc2a5ed072709fcaee3bb3a9c
SHA256

228e4d0333df4a8f349f3a7443843af103923ca077a7686be2a8cf107672f0d8
SHA512

6553d7acf2fb5674c6925cbec5aecc9fb7478cab26784aed22042b432777f007d45596ee8b42cb2b5f3208ff8728071e9a241562742aba3a548c6310ea83d199
SSDEEP

3072:juxfzrcBNFTcPH6byonWgf2e+THxv44/bo3RDIL5+cZg4VRcqIXLQrBj5tKsXbx4:juJeIPgyoWCm/aC5TTWqJrZg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3416404860d364807e2c6c5a8c20bbb3_JaffaCakes118

Files

3416404860d364807e2c6c5a8c20bbb3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 811KB - Virtual size: 811KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ