3b5ab645b4b5e692db8dd054e408be46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b5ab645b4b5e692db8dd054e408be46_JaffaCakes118
Size

87KB
MD5

3b5ab645b4b5e692db8dd054e408be46
SHA1

3ade2ea6d469483a27bcf04f6110dc6fb82039c3
SHA256

2bfd2aeca619278f893b2db2ad917640ef94d3f8fd5d74d371a5848b5b84b012
SHA512

4e5c4cf17ab1341c94525f6cf84deb28ff25fbabb0d91aeec9922c8b4ca2640caeae6bbde87844ac0c76b8085c96af738dd19281bf9bb5d60af0cc8c9a1bb24a
SSDEEP

1536:yHpqdKQfKImkzXmcGhoc//////02VQcprfIx8LadN7fvlPP+/zPwKiuicqkLQggv:yQKLI1zXmcGyc//////0mrc/d7+7oKia

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b5ab645b4b5e692db8dd054e408be46_JaffaCakes118

Files

3b5ab645b4b5e692db8dd054e408be46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ