3f1b3796a7664e94f1c1bf3703a22f52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f1b3796a7664e94f1c1bf3703a22f52_JaffaCakes118
Size

157KB
MD5

3f1b3796a7664e94f1c1bf3703a22f52
SHA1

7f04878465355c28bc282f18ac2984b231bfc941
SHA256

d3555541fa2d08e36a3f5ff7887569f4ee81cfc42b0569764cce4b7abcc63000
SHA512

343e12ea72cd261f0babf925271c3b893a2cbc0fb1158ede026b498e13b0d2717faca01a8b78b1898cf2b763bb0abd94cf7ea6a9cb2b3a39c24e575fb1aa32ce
SSDEEP

3072:beiMoFM4n0S0dsGa0zaAtAKI7uV3V6zoznUS4cqbYpht6oMFmnlLmSFox4:TC46zaAtbI7tkjUS492t63mnlU+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f1b3796a7664e94f1c1bf3703a22f52_JaffaCakes118

Files

3f1b3796a7664e94f1c1bf3703a22f52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

87876
ef3

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 277B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ