3aedd32da8dcd11f92394b59ee5bf782_JaffaCakes118 | Triage

Sharing

General

Target

3aedd32da8dcd11f92394b59ee5bf782_JaffaCakes118
Size

97KB
MD5

3aedd32da8dcd11f92394b59ee5bf782
SHA1

18bf8bfbc8694949629dfdfdf9f3009c84c6fc52
SHA256

0458ba81176bd1af9a52499ab57240fe96f8d676eba31edada5c95d56926e6b7
SHA512

362cdc93f72a6fb99a2c89ff93bebf05c67502c3ed26cf2c4feb791d75112c16ad13fae5fed51825d438bc3b91f6b655d4d49b881afc26510d8d029a5a78436d
SSDEEP

1536:dF2y7PfMPOxYAWpWfNc5KilNRfMVrCfCg6YPDkXGXwd4pLet5EUvok3XWL:dgoRYAWuNcNOrCCHoDkXGXat5Zok3Xc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3aedd32da8dcd11f92394b59ee5bf782_JaffaCakes118

Files

3aedd32da8dcd11f92394b59ee5bf782_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 287KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES0
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES3
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES8
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES5
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES4
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES9
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ