3cfe428031402dab470a1459b53a6b75_JaffaCakes118 | Triage

Sharing

General

Target

3cfe428031402dab470a1459b53a6b75_JaffaCakes118
Size

470KB
MD5

3cfe428031402dab470a1459b53a6b75
SHA1

bde0d00f404d5addc22f695bb3acb74174890135
SHA256

a6172468e764fa482bfade51385deab9043171e498e0d79e8cf0de65522378db
SHA512

fa455577b75a03b5c6cc70ea30f98ec127851c0b4e9545e7e2643ddc8f93201034e6fe565bd0de192291be7ed6a943a7fee32d7064dbb8bb915f97f1725c231c
SSDEEP

12288:Sc39llIEs/3Cnd++BVJXhSdhPBlWZnQQQQ/P:vtlE/3Cd+4JxePynQQQQ/P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cfe428031402dab470a1459b53a6b75_JaffaCakes118

Files

3cfe428031402dab470a1459b53a6b75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ