3b7914cd050b74a263528062787db5fe_JaffaCakes118 | Triage

Sharing

General

Target

3b7914cd050b74a263528062787db5fe_JaffaCakes118
Size

63KB
MD5

3b7914cd050b74a263528062787db5fe
SHA1

192f4f1e83ae476676d27f0bec85a3f23600cf7c
SHA256

10042586acd9a10f6b38add70aaf963c7db38da9a7d6e7f0efd6ddfbec88ebdf
SHA512

e597fe1a048381e2972be185d7196d51fa03dd424cae0817c27068dc4f721adbdf7a1fdb9ecd9a61677255e0e67c0ae3ef89c2f8020ac7ef7fd23cadd386999f
SSDEEP

768:tyCYqjLQl36dAZfjzgwj+V9NwwQpuR+3hfDQyPQo9Em4Ar547z432cu1ZrXl2+gr:TYq/QBAL7mnpuGhrQyH+f5rJ64P4oiku

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b7914cd050b74a263528062787db5fe_JaffaCakes118

Files

3b7914cd050b74a263528062787db5fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ