3b4564c82c9edee743bf277194fa474f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b4564c82c9edee743bf277194fa474f_JaffaCakes118
Size

295KB
MD5

3b4564c82c9edee743bf277194fa474f
SHA1

ba211f88ab8b76647fcb1415f31854e2b163ea9b
SHA256

ead9d8549abdeca1c86b4e017c7682cf804c0b40e9d08b00396161cbbab3c9bc
SHA512

a8a88d3851b41cf917ab71a18eca58d21b312e15a92f9774759659fece93b4e7e4801b0a5c40d4b28313557cc7ffe9aef668c49c503a3ab454059e4b06b672c1
SSDEEP

6144:WJpFiwlSwoDa4GJ3pVPwokxUEuWDWC4qaUqwijLeWbRG7lJk:WJp4m3tJ5V9kxUEubw3G7kZJk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b4564c82c9edee743bf277194fa474f_JaffaCakes118

Files

3b4564c82c9edee743bf277194fa474f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.fcuacb
Size: 3KB - Virtual size: 528KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tpsold
Size: 70B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lrilsi
Size: 263KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ