3b35120d261162d9033fb2ac6f3dceb7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b35120d261162d9033fb2ac6f3dceb7_JaffaCakes118
Size

45KB
MD5

3b35120d261162d9033fb2ac6f3dceb7
SHA1

b71499bed8f0ffd78accfc0768e3383b4358864f
SHA256

c1b4abb5b72de4a3f864993fca6c3d75a831b04c3870f4c249fe03703e77131b
SHA512

a391aa64c967f95536b7998e6f205d0457ffbd6658eef0b5a4e4eecc94e0f2577e249955674a103c89930c6923e34aaeee532b51b5bfa2467fd2793c71bbea49
SSDEEP

768:lCsqeQh7oRM6TGL/ldcMQAqtWZvBkMm+HTBBys9Nojj+3xo:0sqeQ9qGLPcMQVM5q0By6e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b35120d261162d9033fb2ac6f3dceb7_JaffaCakes118

Files

3b35120d261162d9033fb2ac6f3dceb7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

..irclx
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE