3aff845a341935da6033a4574eb5e78a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3aff845a341935da6033a4574eb5e78a_JaffaCakes118
Size

37KB
MD5

3aff845a341935da6033a4574eb5e78a
SHA1

0ee78c67cf4c3e6c35812f77f5b1503b6227ec59
SHA256

d5978e097f7cad9a5b30c25e5d61f648430c143576496cd4f21b95a003f1a8ce
SHA512

c3dc22bd0acd95df186b63d8b9bb18e5ffdfabc8b4d04b34ea498711d3a4c9637c6de1db0680790176b1a61765aa79d1525c7da9fe2a63511364c1da3fe6a8f5
SSDEEP

768:7IzREGrRqYmMil9a7axPzs2rRSjgZS4eQxacW0354RVL6SAoh8:UzRMNl2axPzs2FSsS4e8dzJAi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3aff845a341935da6033a4574eb5e78a_JaffaCakes118

Files

3aff845a341935da6033a4574eb5e78a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 593B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ