3587ecf24aba9f94345a788ad43dbc5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3587ecf24aba9f94345a788ad43dbc5f_JaffaCakes118
Size

1.1MB
MD5

3587ecf24aba9f94345a788ad43dbc5f
SHA1

75e80c19d81b706cad28057ea6dc3d60d38b441e
SHA256

f2d06c8087c90093776c6cc63b35f28fa0111b78543982fad5839b7d0973527c
SHA512

90d3bed7da2435252ef31a073d71a7b9dc0d625c7783be4cd79a2548f79f73d6f047a93b4eb9bbbb3621336b58e176c857a507ea52446cb740884fe52b5cb8ea
SSDEEP

24576:aRyYkutyGdrCDTwLLZd9/qjQ/e9EOXcHfsQsTbAfr:+y76GTI9hOsHfYbAfr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3587ecf24aba9f94345a788ad43dbc5f_JaffaCakes118

Files

3587ecf24aba9f94345a788ad43dbc5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 746KB - Virtual size: 746KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 299KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ