3e3eb482ad2836e08d9735682cc3aff9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e3eb482ad2836e08d9735682cc3aff9_JaffaCakes118
Size

110KB
MD5

3e3eb482ad2836e08d9735682cc3aff9
SHA1

36569e39110055ebf124dadded713687df8f29d8
SHA256

934e856eaed97293dbe39ad0789c2c8135a89cdce353d89319a2e5736dd48c0b
SHA512

4c8707cd38d562df1b6adab216e2608f0a87d0e962309cfeef91b2467482b29c7c66d40e80bbcdf16a08c75f296bd9806fe66bbd60b19cb5ec53cbcfed9a700f
SSDEEP

3072:ef8wNOO5/bHoUYmxF44UkbZEvoA0mcut8m:en5dn4rkWghmr8m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e3eb482ad2836e08d9735682cc3aff9_JaffaCakes118

Files

3e3eb482ad2836e08d9735682cc3aff9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 80KB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ebut
Size: 30KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

skrzjid
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE