3ea07e716ebc0d1f92a755d1a8bed419_JaffaCakes118 | Triage

Sharing

General

Target

3ea07e716ebc0d1f92a755d1a8bed419_JaffaCakes118
Size

380KB
MD5

3ea07e716ebc0d1f92a755d1a8bed419
SHA1

bff6d0a7631d0673a87ccb44daf1123060fce101
SHA256

2f0fd1ba102ad0e3f7b59755141c77e2ddc1f8fdfb92e09c86400bbe02d5e195
SHA512

13fd4fc239eaa3256c7de4e6b8d0ccd0684e631d1433caf07b347f9dac87deea6474ddd209f25c4f119065a34f596cd5d760644240b2a23ca1dc3d6b783ecf64
SSDEEP

6144:DvF/oAp8jsrEjQeEuIJ//25Pv8JBbFOfVnRes4a/9vISsNkGvmpO:5TyeETEfJn25HIBhONnYs4a/xISseGvf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ea07e716ebc0d1f92a755d1a8bed419_JaffaCakes118

Files

3ea07e716ebc0d1f92a755d1a8bed419_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kctf
Size: 336KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE