3729639ceb41b61ebeb77e5b8a2be8d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3729639ceb41b61ebeb77e5b8a2be8d9_JaffaCakes118
Size

3.3MB
MD5

3729639ceb41b61ebeb77e5b8a2be8d9
SHA1

4d3b7b2e8315370f16ad99e4cb7c77554ac15bcb
SHA256

e445dabc5019a3b9043dc4990946e3f19372a505c6daa425bd6fa9a8f3219eac
SHA512

a0e4b9c65869db6642183b121c8f557d563d40912e85eb12a6cac5cdab518ffd1907ea83698f0d77155e67e883e3ae06341bd93fbe129207ab4237147e8da18b
SSDEEP

49152:ulOjSzfa85ug/UQcwmv2f1d4+7L6IRsGR4BrpIkn+zEgJBewKCko76BlBgHRCb5k:u71Gefb5uSFerHQJiCooHAHVvaxB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3729639ceb41b61ebeb77e5b8a2be8d9_JaffaCakes118

Files

3729639ceb41b61ebeb77e5b8a2be8d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.$mxgml
Size: 1KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cr5lx9
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.$y366r
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3.0MB

.rdata
Size: - Virtual size: 420KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE