3eaee742edd31ab487c4480239d3d7d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3eaee742edd31ab487c4480239d3d7d6_JaffaCakes118
Size

187KB
MD5

3eaee742edd31ab487c4480239d3d7d6
SHA1

fe5071b552ebe8befd3d535e817ea8619488121e
SHA256

b4c5a2c529207f74e292d228fdd0d89d8bec6a468c63c8b79fef311b242f02dd
SHA512

8f429602558cd213668a0b405dcdd7ecf7200d362abfae4c7a80f89b55bd2b41cc459bc293a41eb3adfe6377ac0ee649052ca344cc520ba3ea436b481fbc4dfa
SSDEEP

3072:mVYX+vdj7zX3AUtW1tC5RtZlPJifInqsykOEwL+Uq3UORJQUQLsxgt2K6gftf1:0y+VTgUM1sTtZlPJi0o1EwL+UIK4x2Ik

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eaee742edd31ab487c4480239d3d7d6_JaffaCakes118

Files

3eaee742edd31ab487c4480239d3d7d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.misswe
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.misswe
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.misswe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.misswe
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE