3b4e52df02e477bddb6a711472aa0d8a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b4e52df02e477bddb6a711472aa0d8a_JaffaCakes118
Size

342KB
MD5

3b4e52df02e477bddb6a711472aa0d8a
SHA1

92fcf4e99a83f51404c748d5d180cfe9762770b9
SHA256

332e66b62608e39c1aa502d8eb8ef8f85e6d12d306cfc290f51a4bb7cd588ba1
SHA512

2dc8422d71a6ba9af91882370ee5b7195630f794f212355f07881bc9aebe3ccbcaeef12634baf1774b862578da96dabccace3c86a8056d595121cd2de9557f66
SSDEEP

6144:pQiZptrMMx+HyrK+jraItTfveUdRryqVVLWx10+:Lr4c+HSK+j5veGsOc10

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b4e52df02e477bddb6a711472aa0d8a_JaffaCakes118

Files

3b4e52df02e477bddb6a711472aa0d8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.bss
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 321KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE