3ea50694b2c7ae5021bc38bab94f75c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ea50694b2c7ae5021bc38bab94f75c2_JaffaCakes118
Size

534KB
MD5

3ea50694b2c7ae5021bc38bab94f75c2
SHA1

7c12e3ade0eba29b360d58daf2a950430322d4b8
SHA256

0c38f35a9e3d1063ac9dc844dcbdc49c2e2d9892b62d534a5b545a0188ab4651
SHA512

c2bcb90a487009698a5efecadf7c1efba5b433d52ad95dbec3451de2b4e5a248ebf83a0ee3d743c4580ee16df97da4ac0585e9284e014ad0f17efbaa0917339a
SSDEEP

12288:g7kIORIU+TGSpzeh82yprnls15ie8bKhE:qb7pRpziGp7lLb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ea50694b2c7ae5021bc38bab94f75c2_JaffaCakes118

Files

3ea50694b2c7ae5021bc38bab94f75c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 419KB - Virtual size: 419KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ