3e79336257435e95419c0e4174a9067f_JaffaCakes118 | Triage

Sharing

General

Target

3e79336257435e95419c0e4174a9067f_JaffaCakes118
Size

534KB
MD5

3e79336257435e95419c0e4174a9067f
SHA1

b2ec8ccd3d61f361d8248e4e913cba0c3e2e9ba4
SHA256

f76e41df7cadcc22656a7233cc59fbea0abfa0a89f2e12e8f200a90647bc16a2
SHA512

9ce8a105005577029c2881488d9aad55a19a566d0168d10f4e150d3f54b9adcd65834d894154638df402caa6e767b8f065338422269497ca55d8aad504c29e5f
SSDEEP

12288:xM+sIFEy/R3PdrHGLxe0DF6A3gpk5mBCEVG56vrD0Tvsx:SWn/R3PdrAx7DB3gC5mzhP0Tvsx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e79336257435e95419c0e4174a9067f_JaffaCakes118

Files

3e79336257435e95419c0e4174a9067f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 518KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 311B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ