3da859304be9e3b45056d2fb284e7e03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3da859304be9e3b45056d2fb284e7e03_JaffaCakes118
Size

58KB
MD5

3da859304be9e3b45056d2fb284e7e03
SHA1

58c4fef6a30e10751e642bc9d3bfce08d585affd
SHA256

96f75c5fba41b11c845f50c429f974a88026e7b99ecfbfec4cee11745c1f0cc7
SHA512

caa485d972ea79c808a59bd224ad39b214b1eb7a20ee4a73839bc36cdc69335ad5cb608428eee952fc2e3619dacd7f25c5bcfebda0cd7ee6f74ee87a1bf2fd77
SSDEEP

768:qfYtTAX+UfYtcOzbz+5VLknIyuBCAmv8RU4hgnAT9KGkygbPKZy7meXO1Ps:qgIgeezhIyjAmihgnATwGkyePKwi1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3da859304be9e3b45056d2fb284e7e03_JaffaCakes118

Files

3da859304be9e3b45056d2fb284e7e03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Fhsiotvlp
CloseCqocarecj
Krnhbnh
Pbahcvx

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ