3e9e4cbff937cb98f8df0e1423c0af72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e9e4cbff937cb98f8df0e1423c0af72_JaffaCakes118
Size

33KB
MD5

3e9e4cbff937cb98f8df0e1423c0af72
SHA1

5f94cfd65282727147fa305bbe9480fe9b0c6cf5
SHA256

7c8d864a4c412f2d1dc81ba52a13f83685b6bc42264f25eee37eda5c2889804a
SHA512

ca0f0f1d1559486e052e0013c1192276bb28a798ddcc3eebcb7f1b3a55d5a33ad84b7ce3db4a1005aa29fb23986d8b77cb63aabf561c815dab29b91fac6274ce
SSDEEP

384:KlPt270wSr2osgRio3JFEDAHZL3M4S7zn3A91iKejAzuArDXF6xQ377KSzqHj4/8:HJSr21Uis8AF3m7zmiPMu2DrNqHij01Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e9e4cbff937cb98f8df0e1423c0af72_JaffaCakes118

Files

3e9e4cbff937cb98f8df0e1423c0af72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

NOEXPORTS

Sections

CODE
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE