3ba5c5dbcd109438fda1b1504b42c79d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ba5c5dbcd109438fda1b1504b42c79d_JaffaCakes118
Size

376KB
MD5

3ba5c5dbcd109438fda1b1504b42c79d
SHA1

b78d3f30c4cb49b1db8d92724aa7f3293a86796b
SHA256

8c50b4ad8c2f7d1ad42f3289dcb72f95c847ab1cf554c02ddc0ace29a11d8211
SHA512

143fd598edebd2fde6c458926adb9660541c3bdcdf38dc9ba8dedb7145a2dcec172e38ce283f6b07a1a65da8b9f3c7c7f1aa834eca83482e8f45b9e112d5b28a
SSDEEP

6144:h/Nvjl4N6KRwBaAn1vATl/mam4e3nnKheiRaTSt6SOCOcLJVJoH0dn8Y50oFG3lP:JNLeN6KRmasvAT1Q3KnRayJVu6nxJG1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ba5c5dbcd109438fda1b1504b42c79d_JaffaCakes118

Files

3ba5c5dbcd109438fda1b1504b42c79d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 317KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ