3889f2870864f7595c9dc12f3eca07c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3889f2870864f7595c9dc12f3eca07c7_JaffaCakes118
Size

595KB
MD5

3889f2870864f7595c9dc12f3eca07c7
SHA1

6e767b31d54f62a74061a048b538f1e2a44ea7e5
SHA256

2a26bb00b324a9fcd297b58cc6b47506500582d8ae6fa33132c2d9578585bd60
SHA512

abe6ddeefef58343cdbc2622813d83f151b6c5fd5a445882fdb204fb496ca89aee79d68b9e5571075b7887865966d03e7a745a2a9013575ea1e2121fc5a95ea6
SSDEEP

12288:HY5S5MOwvW0Vmp5nkalvQiDAZ4prRT7A0do6UTx8y:45SmOwvW9nkaV+4xRTMiUTmy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3889f2870864f7595c9dc12f3eca07c7_JaffaCakes118

Files

3889f2870864f7595c9dc12f3eca07c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 4KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 478KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ