3a8c69d5905b1948c3e5cb3dff1ef50d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a8c69d5905b1948c3e5cb3dff1ef50d_JaffaCakes118
Size

623KB
MD5

3a8c69d5905b1948c3e5cb3dff1ef50d
SHA1

cbf94c60d43481aa68aaed12cf9bd5f50160de1f
SHA256

7175af866bae3a5021fc6112ccf36f62d22e9c30055cff1c91bae843e2e458f7
SHA512

8fad14bffb227c26c09701b1a4614173117e6a10d7e293ed30fe09dead73d1939ecd6b3c77abbacc9d6706beb6ba81b9e2a05fac744b492c22272a3f43a5ce6d
SSDEEP

12288:bJczNtoMV9RyZpHlGbZMiUy40fuIZFyEUGuPaz1MVWjj:1iwU9RyZpHl0ZfxfueUGE41Ayj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a8c69d5905b1948c3e5cb3dff1ef50d_JaffaCakes118

Files

3a8c69d5905b1948c3e5cb3dff1ef50d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 456KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 163KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

and
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE