3b282d4209d14a51c575ac4d0baffde3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b282d4209d14a51c575ac4d0baffde3_JaffaCakes118
Size

555KB
MD5

3b282d4209d14a51c575ac4d0baffde3
SHA1

1f241bc127b183624fd43e1afc5d9a926e53f118
SHA256

a6a3aeefc62def5077dbe90fb0d30f29cb64a311709851f866fe3dfd196639b8
SHA512

b383a2308f9ce62c92c589218138bae9808d9cd12ed3ebfce12e549f198139855c7f0e5b15b029ef2d1ff190203c870582c37a165d6f3fb015ca790f4dc3ec27
SSDEEP

12288:F73EK3EC8swhHMZ8b71ZdO+teFIPUCxQgRw:d3EKUC8bHH/dIFIcgRw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b282d4209d14a51c575ac4d0baffde3_JaffaCakes118

Files

3b282d4209d14a51c575ac4d0baffde3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 496KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ