34f6a34e2cda43169ca42aa1d1dcffc7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34f6a34e2cda43169ca42aa1d1dcffc7_JaffaCakes118
Size

1.4MB
MD5

34f6a34e2cda43169ca42aa1d1dcffc7
SHA1

21e1fc98db93573abceaae734b92a303b51b5b27
SHA256

f577dcb40ce6bac479c04e0f6ba6a07c5aef08e589241c3710f5a25c96981e16
SHA512

e18235ff7f94a3d5e618e5bec1379dffd931514273a0f3d3c668c095bc6ac17c168aff21ad2f125d6c87eded0568f9273830a7af4c161e1035cc9cefd7cb1dae
SSDEEP

24576:4DHlsGRFGVNNyqA+VViig3weeTt2Rw/+w1wX8CqPf+sZklLX8cKSLjfcxc/BEKKR:4DFFGVNNyqA+VViig3weeTt2Rw/+w1wC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34f6a34e2cda43169ca42aa1d1dcffc7_JaffaCakes118

Files

34f6a34e2cda43169ca42aa1d1dcffc7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 797KB - Virtual size: 796KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ