3b61463e94c5f7974cb41c2392a6f985_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b61463e94c5f7974cb41c2392a6f985_JaffaCakes118
Size

302KB
MD5

3b61463e94c5f7974cb41c2392a6f985
SHA1

475af173c34b833e06fa27f8ce11a189159ada7b
SHA256

79af4ae6174bfc794eb8a844cedac83e32b06959ca0a6f955b09e91b2e9957ca
SHA512

b4312cbd5d2acc586f9239ae7dc8239fe8321c9fa2b98438de51598137afee7f71c93da5ddfbac7cfffcbee2f0381913c899630910935fdec131e438b66a3986
SSDEEP

6144:nHmnvurUuV6SXcMukcnD3R8UQx9+T0Xb9JpPrj+Phq:nH61TmPcjR8UQxDXpPAQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b61463e94c5f7974cb41c2392a6f985_JaffaCakes118

Files

3b61463e94c5f7974cb41c2392a6f985_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.icode
Size: 962B - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3.0MB

.edata
Size: - Virtual size: 456KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 276KB - Virtual size: 280KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 923B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE