3b5d04e797b17d856a88edce499fa19e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b5d04e797b17d856a88edce499fa19e_JaffaCakes118
Size

903KB
MD5

3b5d04e797b17d856a88edce499fa19e
SHA1

b924d423e8268cbe567a819996ded51cc5aa3876
SHA256

6bf384569913bc4cbb9f27f3dd2c04d7734ae856bf1478b3ab5746cc360c92cf
SHA512

18414159320461d616f060e19f16ac4c1db598c368a1221602bb5b50d33d917b40fa5fa3908e7bf0f6223e61c0ef889a5f79360350b39d985e8b8a94dcbf901e
SSDEEP

12288:PgEP0EzibDdVhbLSa412Y1+m9Hazoeo6JHN4XeXPM1vMESVc04jRLJwLbqnoB:YI03b5Vh3Sko8fLH+Xe/M1vMgNdwaU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b5d04e797b17d856a88edce499fa19e_JaffaCakes118

Files

3b5d04e797b17d856a88edce499fa19e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 739KB - Virtual size: 738KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

LuoXue0
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ