3a8ca13e7e3b2bb8a478100d343ba7c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a8ca13e7e3b2bb8a478100d343ba7c6_JaffaCakes118
Size

530KB
MD5

3a8ca13e7e3b2bb8a478100d343ba7c6
SHA1

ceee8b01f46f261a665d960eb6b9afed4aad7af4
SHA256

81121b571bd31f32230c267b7620e0533c1b2773a184df2fe9e828669fba91ec
SHA512

30c668275b55b8a296ac93595dcc4d2477ec7c0d19d95d858915540822d7de3a7e320098e589a0e97dfabee33befdc04631a86dfcd4bb7b8cbedad56db911528
SSDEEP

6144:s2uDRamEmgrAH/mArBJatZ0/oE6+S8ucIiTXow2r/qyUOAmZL1lQg/49V6ikFB6S:mDPEmgrAOBtw/xS8dCBQ6XFw9zj8Bp1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a8ca13e7e3b2bb8a478100d343ba7c6_JaffaCakes118

Files

3a8ca13e7e3b2bb8a478100d343ba7c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

NP

Sections

CODE
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 59B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 417KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ