3b59b1b461327dc7f74d859d1e8a8b48_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b59b1b461327dc7f74d859d1e8a8b48_JaffaCakes118
Size

187KB
MD5

3b59b1b461327dc7f74d859d1e8a8b48
SHA1

75be90d72b3b47786cadc3264e42e2ad22c56c9c
SHA256

8b8b1f02095b2ead94a9c24ce72f51c51c913f7dd24440eb4d5aa2112b6a4e94
SHA512

eed2dab242ddd0d71baea29e478d50caa7985aec3fb39dd8ebdac4a65d08e970dc97b08334ede6bd8bb2aa311c171d2902d540811c65fe4ffff24ad48d2169d5
SSDEEP

3072:k7AnTmJLnwsc4G057KVNPTAMqEN15GbbcHOIMwpdI5q94G3SLFTgZ9vv:0AnTmJLnpxh7KNPlqENabbgzpdIYrCxM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b59b1b461327dc7f74d859d1e8a8b48_JaffaCakes118

Files

3b59b1b461327dc7f74d859d1e8a8b48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ