3f540d166e9f8da21a06a465b9cfae47_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f540d166e9f8da21a06a465b9cfae47_JaffaCakes118
Size

645KB
MD5

3f540d166e9f8da21a06a465b9cfae47
SHA1

be69f6bf661237b2394ce20dfd8b94390e7a947b
SHA256

9fc2cbeb7b51a4dec6a1a0574fc9011fc92a507b277ae24a29372f7d6c894627
SHA512

899f2909ccb3910ee8d30b0d0adcdb291b221dfa316e46483ee79299690cc68ee60c1f08f896640f2112cba72dfca550c6e688972003fcf3e6d06769c9ef6562
SSDEEP

12288:YS9U0BFtvsPUkGXgDkmBxAJmKVg8zThh6XQ1mo5UA3fTX3N2:5VXtyLGwDJkJxVVzXIImoD3fTXI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f540d166e9f8da21a06a465b9cfae47_JaffaCakes118

Files

3f540d166e9f8da21a06a465b9cfae47_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 588KB - Virtual size: 588KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ckkaixin
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE