3903d8c70637f26d63013d3623ed17fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3903d8c70637f26d63013d3623ed17fb_JaffaCakes118
Size

300KB
MD5

3903d8c70637f26d63013d3623ed17fb
SHA1

876fbc524aa59e6d96bdbab20e0b110a6239f06e
SHA256

f09177a6ef4dce08f06225b8eb8d301e726f509e27ce20ba4c2bc1b1e23a5260
SHA512

d8f216a7b04e3724ccb3ed6f18107da6f9ba13cb9b4e48688e0d7e9b4103ea15d26dd6099ac01c2c83d0f63dd661a1689100421516f80d025428bfb0a243c695
SSDEEP

6144:ywBHgM7Cv6cLN8pMb8M+PwNldz3+Nt1cIqw+ndHNP0HT/q4aQ1B+:ywBHgFvRb8M+Ijt3+Nrqw8dHNP0HW43+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3903d8c70637f26d63013d3623ed17fb_JaffaCakes118

Files

3903d8c70637f26d63013d3623ed17fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.zhxadqa
Size: - Virtual size: 900KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jbloakk
Size: 298KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zyqcjpb
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE