3e95c6e330a68dd2356fc877a8f122c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e95c6e330a68dd2356fc877a8f122c6_JaffaCakes118
Size

163KB
MD5

3e95c6e330a68dd2356fc877a8f122c6
SHA1

c351e7e3680da4dff3f23446ad2c961aa1cc1ef3
SHA256

cb0a19fdf3fa9627d8f63297d79c334b49b07d3f8df6e059a7bf30f394f2d65a
SHA512

b6a653cee2298c3802c27d920d1261ff4478353a95e3235d898afa555ed40745d0385e3772eec525715a6509d39873aae5612a56f5992fc11b543b86a3fbcb79
SSDEEP

3072:UB4MlPTC2nF3AP0cOXKlC88kYztGGNLLBVA6QsBfSYNHtYRG8cSwHHHS:UlPG2F3TcWKgNkYZHNnNlbtYRG8cSwny

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e95c6e330a68dd2356fc877a8f122c6_JaffaCakes118

Files

3e95c6e330a68dd2356fc877a8f122c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 309B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ