3d5cbad37a9636438ee489d6b3442192_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d5cbad37a9636438ee489d6b3442192_JaffaCakes118
Size

629KB
MD5

3d5cbad37a9636438ee489d6b3442192
SHA1

18439a07472930e335604eb0e7c0d2be82c23f7d
SHA256

9149315fd338bb78486afc230ba5ad0217bce197369e80c5defb4aabb1c59461
SHA512

b4de93be9c4e0ca60bc709e5b021ef4985dcca44f0fcc7ca034c1736368c0a6e1d6c5f805dd84d7ac1f2f813f731d9b714a4542302bc0fab85799c712d1f1605
SSDEEP

12288:MO7g4mVTCAZZ50LRXg1CS4L1jpgOUi+0HbNJHsc/pSqTu:McbmAAZZ5kdFS67gOUi+07Dl/pn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d5cbad37a9636438ee489d6b3442192_JaffaCakes118

Files

3d5cbad37a9636438ee489d6b3442192_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 547KB - Virtual size: 547KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ