3d6c4114c591a9f9fbc2c89a776f40f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d6c4114c591a9f9fbc2c89a776f40f5_JaffaCakes118
Size

392KB
MD5

3d6c4114c591a9f9fbc2c89a776f40f5
SHA1

70702153950e563d72699368dba3e69297a1f12c
SHA256

458d36757bb8af526300ed4428d6931987cc3bb9da74045e767588be1429d4a2
SHA512

3ee1dddf1652dac0a03a9f2a03fba11cdb5ce6055ec561c92d778de3c54b17ea134d4aa32409eaf6f3b75a0bfc9864c65c04fec120beb198f07caf88b3c7fb6d
SSDEEP

6144:8w4zkGIhikXkdEdRl5lrtpo1J5pV7mAe2C2a/fk1/JaMYYYEjXPoHpxB:89lKiWgEBTtpkPne27a/fy0kYpxB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d6c4114c591a9f9fbc2c89a776f40f5_JaffaCakes118

Files

3d6c4114c591a9f9fbc2c89a776f40f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.data
Size: 380KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dking
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE