3729582c63b467f1cc3533357c2c3559_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3729582c63b467f1cc3533357c2c3559_JaffaCakes118
Size

97KB
MD5

3729582c63b467f1cc3533357c2c3559
SHA1

c6b138ed4f7aefb762710d5d6cd568d58cced4b1
SHA256

a67cef26c88e835d47941101ac68d3a97399e88b5d50f31459aef12148053ee0
SHA512

0af51661a137387bb7100ae637143d9b485cc903af6b5936a51c34389966770952d2e2eb3b3acf8c5a5153cd826e2a19d059e335b3b8f7e5be7cb2c22c741862
SSDEEP

1536:RySqlQIP4z8If/TVgCMC5Lo2uTxMHBB7YB2BrB6640voMhcOIzbr18pE5vXm:0pQ9fbVUC9oBKX0ctZ40Bh1Izbr14Epm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3729582c63b467f1cc3533357c2c3559_JaffaCakes118

Files

3729582c63b467f1cc3533357c2c3559_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 604KB - Virtual size: 604KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ