3c850821e891e4d12c11f47e0d0c9e17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c850821e891e4d12c11f47e0d0c9e17_JaffaCakes118
Size

425KB
MD5

3c850821e891e4d12c11f47e0d0c9e17
SHA1

27919491264ba0e621675caaf5994a39fcb904b4
SHA256

44ac2c755e7803ad63f99976a138adff2814be4db6367ccbba2381bf8630a278
SHA512

3d69e735c068fe15361be2a1367e22f799066edbc45598976804fb8528628c7d66b414573d2a94d0ef913c595a87813f04e17cce0e7e03a877d049bd25354d53
SSDEEP

6144:w01+IOLwsRAKqjrkJ5pDzt0hD1wduDruV964NZ8oD5G+Voo4kZlT:1+I6wsOKqXFRTDrwD023ZXT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c850821e891e4d12c11f47e0d0c9e17_JaffaCakes118

Files

3c850821e891e4d12c11f47e0d0c9e17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 357KB - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ