3c2c978e8f0dbcbfb9ad763f97730621_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c2c978e8f0dbcbfb9ad763f97730621_JaffaCakes118
Size

189KB
MD5

3c2c978e8f0dbcbfb9ad763f97730621
SHA1

cbaff5a26885834b4e18568bb9bb01268d1087e1
SHA256

1d4894b1fd0c2f839412ac84dcc46bb650a6fa69fc4727b2b80b69ea850b7be9
SHA512

407e61c4a06b1bdcee8f0aeb671c255c2ed7d087acfbe303af6ea4c7565c6b8293f5b3bc7c3b93e10e79efd3004c9cf08cb1a8eb0f7d0016b87ec8b3804a015f
SSDEEP

3072:S1LEfgYVg+J2zQRIhDhxPVqPQkQxhd4pinflYQunlrGUcMpLlKiipKbasHp:yYIYVg+J8U+DhpVqPQkqlflYllrGCpBb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c2c978e8f0dbcbfb9ad763f97730621_JaffaCakes118

Files

3c2c978e8f0dbcbfb9ad763f97730621_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 511B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ