3d28920f50ce5ac8812188f309d94661_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d28920f50ce5ac8812188f309d94661_JaffaCakes118
Size

59KB
MD5

3d28920f50ce5ac8812188f309d94661
SHA1

fe64febbe1bf71fe665d77d9d94bdd25e688bdf1
SHA256

d322dc4b12b27df3e15dbf6e379e7dbf5b1b77ccde9f35c181fc09ad47c4c290
SHA512

17f7ba7b2845eca033ca9e826a9ef4628391d9edce39fadafa58a2fd7a55301ea783b4add927d6b37f1af7e3e415d718dde5086d0c1e16507cdc7fb265d0bed1
SSDEEP

1536:2qNRDFRhuXnlcqMa9Vwlbkf9n4l0bjUCMVM:2qNRDrhuXnKqMasJ+n4KbYLV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d28920f50ce5ac8812188f309d94661_JaffaCakes118

Files

3d28920f50ce5ac8812188f309d94661_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ