3494c19bc1e34e2699df1fb32cec7dc5_JaffaCakes118 | Triage

Sharing

General

Target

3494c19bc1e34e2699df1fb32cec7dc5_JaffaCakes118
Size

206KB
MD5

3494c19bc1e34e2699df1fb32cec7dc5
SHA1

6cc60669ae958f45858c07e3e77a6fcc1dbc0ee5
SHA256

17e3c23a3b8f807ec82a70278f68e456daa59a098b61b1055d55ef6486c45e90
SHA512

cd5d8f83e0b068d4f4de257ba76fd92d99791a06a41216d170513cc3a766ce0670b24c7e2de6b7b9209ae7a9bd616964253d4855d0fbac10f7f596fe7f77ad1d
SSDEEP

12:0h/G70yUQa0AtYs/rk+6mhgYQWSaQiSIeS9yf0kIqqf2oYaIT7BJ7JNHH:0hu70Z/rGp1FPS8Mf3glJlNHH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3494c19bc1e34e2699df1fb32cec7dc5_JaffaCakes118

Files

3494c19bc1e34e2699df1fb32cec7dc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 139KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ