3e1d90942af04337bec9f91db3ee8103_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e1d90942af04337bec9f91db3ee8103_JaffaCakes118
Size

184KB
MD5

3e1d90942af04337bec9f91db3ee8103
SHA1

3bc189dd8554d8d75f07912e10f20f9cbb63eebd
SHA256

6ef1331e9714be239ecd5480bd936927a167a0da5dd9def0d4e8301c384c2b9d
SHA512

755da9b954dc6f855f8c48a3d3c29a3a7e1d23d04697597f8af599628303f97fe537b8c08453052f5077c0d897bfb1fa3e950ebdf67ba6e426e741bfef5a7a50
SSDEEP

3072:Qw+LkbTRHXQiquMqidQt1kdvztSTUBs5DWhXyr0vw3mC:/+L4RXQiZFidJ7LBs2c/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e1d90942af04337bec9f91db3ee8103_JaffaCakes118

Files

3e1d90942af04337bec9f91db3ee8103_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 980B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newIID
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE