3a873e41a6d0b8cbbaf78bbed0ebcc1e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a873e41a6d0b8cbbaf78bbed0ebcc1e_JaffaCakes118
Size

100KB
MD5

3a873e41a6d0b8cbbaf78bbed0ebcc1e
SHA1

4e25d0026accc6db046e93c53329f4c023d8c4ac
SHA256

161cd9947fa6b8f988e9b52f74a0ed482b4b4df88e51faabe205f61560fe61f6
SHA512

8fad0318ea11ce30cf3f8d29b03d233f70235aed348971219d6255691380fe51fbc61145f8e7be9a463f6ee1ccb21c847330a34db1df784e1b5b569f54fe0b2f
SSDEEP

3072:1YhsYIwvi94pkXbKaNLhlLOmE/MRAygEv9yHjLy:KhsY2WpkLbLhlLOmE/MRAtMd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a873e41a6d0b8cbbaf78bbed0ebcc1e_JaffaCakes118

Files

3a873e41a6d0b8cbbaf78bbed0ebcc1e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 30KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 575KB - Virtual size: 575KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ