3def9a15d5ef6f5182e98044bc0a73fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3def9a15d5ef6f5182e98044bc0a73fd_JaffaCakes118
Size

79KB
MD5

3def9a15d5ef6f5182e98044bc0a73fd
SHA1

446d0c5e5b0ea57e10b66f02494fac8c6278e7bd
SHA256

52376133a0d49e7241f080d0bed4cc63fb7960e09f62d87c87dc6bb55aa77f3d
SHA512

fc27710c3334850418bf0305928cfe841a978689ec3a1c800553d61aeeda4c8a4c1bdfc7dfcd5af13a0862e6711350f5735913fa2848c658dd1213c6d6343b65
SSDEEP

1536:uJqKQCQ3KLXzeGrLe5XUqaQHpdj5jUvl1l9ySixLx3bQl:uHQ6rzeqe5uCdj5jUvF9yb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3def9a15d5ef6f5182e98044bc0a73fd_JaffaCakes118

Files

3def9a15d5ef6f5182e98044bc0a73fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ