3ea2ff0162a495501411194907a6113d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ea2ff0162a495501411194907a6113d_JaffaCakes118
Size

423KB
MD5

3ea2ff0162a495501411194907a6113d
SHA1

8b8084bfd541f64d18badc210e28fe0c0f19598d
SHA256

9931fb9cd9b893df3976a063c12ef801a8de7c91a351bc6f76ecad8f31cc9f6b
SHA512

d69f96ee464d33e750c85a8118965163832e19315ae95e5443c2c959bf6edb4d0e9d9cf2609a1180db7f78260e424fb45fcffc0c21f891eab1d8732d4852c8a0
SSDEEP

12288:U7CgORTfvKiZjDe0ciDmzUK1S/DobzN2:OvORrKYj60ci2XDbzN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ea2ff0162a495501411194907a6113d_JaffaCakes118

Files

3ea2ff0162a495501411194907a6113d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ