3401bedeea80dfa3bb690f7394e42474_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3401bedeea80dfa3bb690f7394e42474_JaffaCakes118
Size

230KB
MD5

3401bedeea80dfa3bb690f7394e42474
SHA1

3785d093c93ea579534217c6d9e20dd14cd2bb88
SHA256

c1b9f1c71745f4b0f42c073ee59298dc5ffdb02a54584ccec28d2e66983a3faf
SHA512

a63695c3136d6ccc5235c571936d3b0f403f862f6c110e0609e9b6b1c83d3a4c77ea10e8f055c3f6b170b51ce967216d34535d0966c96f981cedbd61ed60609c
SSDEEP

3072:S5jQg8YoEu+SK0wx6RCVxAsU+gigrSbNKiAcqplrHVPyKRZz5px00oSvldmtPjF2:PY3oaxVU+gldpjPHtv00vlsA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3401bedeea80dfa3bb690f7394e42474_JaffaCakes118

Files

3401bedeea80dfa3bb690f7394e42474_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 481B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rqloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ