3d80688b6704accad4815b65d26138b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d80688b6704accad4815b65d26138b2_JaffaCakes118
Size

459KB
MD5

3d80688b6704accad4815b65d26138b2
SHA1

f0c3572bc6efc8e13d80f52eaed4fd4e6a5c8c9c
SHA256

eea1ae2f25e33af256a66e13a0abf9da5c6d69ece96791b1d94a871dc3e3a769
SHA512

27509d29769e2beb7beca50d8fd793ec738e57e594ad5dd483ec3437f75d579db3b0e67c079411a4695cceb6e69074e5624afb374ea98393ac08e4d4848b1c0d
SSDEEP

12288:lb1kV0uq/JQ9jn89ZcfvuSsnRPwGxI+VP9w0wJ+MprbuBZM216wql1R/:rC+/Jcjn89ZcfvuS8PwGxI+VP9w0wg21

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d80688b6704accad4815b65d26138b2_JaffaCakes118

Files

3d80688b6704accad4815b65d26138b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 403KB - Virtual size: 403KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ