3bb9d0ff496fa95fcf1c28c5249c4f17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bb9d0ff496fa95fcf1c28c5249c4f17_JaffaCakes118
Size

1.4MB
MD5

3bb9d0ff496fa95fcf1c28c5249c4f17
SHA1

fd909f496fcce50d4d1828181ff370fc3377ec10
SHA256

0d248bf1a950f10f4310c421f03642ddba60032e309e2e6540333359e459c8cf
SHA512

26d22cb3ca546447b615f1477756eca6d49ae98184891df3dcf5767e809f61bda98c240bd5f3b4bac59c14ea705918c60daf236ce9718ca95be3f2216d33d37f
SSDEEP

24576:k5b/n0BePK3U39a3jeMbRvTKpjHJyo6umyblp4I48wgkyCRZfBJSwc:k5GoK53jeAbSd8jybly78wgk7zSwc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bb9d0ff496fa95fcf1c28c5249c4f17_JaffaCakes118

Files

3bb9d0ff496fa95fcf1c28c5249c4f17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 585KB - Virtual size: 584KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 830KB - Virtual size: 830KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ