3ab20e6b827228ec8eb76e3d5ecab102_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ab20e6b827228ec8eb76e3d5ecab102_JaffaCakes118
Size

186KB
MD5

3ab20e6b827228ec8eb76e3d5ecab102
SHA1

5f270913126fdfebc36d9faba2f665e15f864de9
SHA256

66cd1471ae15dfcbd889298af125b7fd9511c733b2016ee6e04a83ed1f7378ef
SHA512

86d26916e642737d8b5fb18328507ac5b30a54c0ca388e7f628b364cb8f1587a68cd64021ea92a639f9d63e7056d2de5b43b3b813d6967448a46473acdbc52f4
SSDEEP

3072:1T43x48v2Ub2DAF8pCtzGBx9M0vmQcbGc24OhF8EqfnAaMviVF/ONLpmfdw:1kzv2UvF8UqBTM0+QcbgPcfAaVd4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ab20e6b827228ec8eb76e3d5ecab102_JaffaCakes118

Files

3ab20e6b827228ec8eb76e3d5ecab102_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 42KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 138KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE