3bb5cb938fab20ca890eac50392d3115_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bb5cb938fab20ca890eac50392d3115_JaffaCakes118
Size

148KB
MD5

3bb5cb938fab20ca890eac50392d3115
SHA1

80b7eb892f8119e27ad012d06fb807fab534b62e
SHA256

94cbe80bcc8a8c1409b62e76d4d86f7e63f26126f48128def155293aab2689a8
SHA512

518e96da99bf6a3c18f688149439aeb0e56bc2d79e78c227ac18fba7c97c674132059059af65c38f81ee8f0157aff2a411466687e2c7533477a2bddceb751698
SSDEEP

3072:gSCcW8hywakr39rAbU/XYaDJy1St9x2bANkgXyL6oILtYvFIy:gSg8hywasIaB2cKLULte

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bb5cb938fab20ca890eac50392d3115_JaffaCakes118

Files

3bb5cb938fab20ca890eac50392d3115_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ