3b4a58db18300ab2d20b663e0c68bce4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b4a58db18300ab2d20b663e0c68bce4_JaffaCakes118
Size

28KB
MD5

3b4a58db18300ab2d20b663e0c68bce4
SHA1

5c920b6731c93991155526aa143d47a5d156b997
SHA256

c63c8ff8391fcff20906368b4a86086905a4d16f4c8c3d1b2618fd05c8d40c51
SHA512

83c6d2b82985085a6d630b9e7e7627c8f606d3a80013e0625e139d7ec25ad5c1a1ccaa36a8b6d36caef0adb7d6208d48f52d093fd6d1cc9dcf136cb269337ca1
SSDEEP

384:YJUf6sRo3/koEeqXRnFHPBg5o8ocnhhfClz/v81bDk6tTSI1YV+aolemmuB9JVbh:jeqX985NhKJkZDkq+0c+a+Zr33hPCI/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b4a58db18300ab2d20b663e0c68bce4_JaffaCakes118

Files

3b4a58db18300ab2d20b663e0c68bce4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 601B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 458B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ