3eb94024002f1d92b4871aa2cb5624c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3eb94024002f1d92b4871aa2cb5624c1_JaffaCakes118
Size

848KB
MD5

3eb94024002f1d92b4871aa2cb5624c1
SHA1

98557371a669aa8ce0d709f908d4ff74ba2307dc
SHA256

3565f09afce7e18dad8e097c28491d63f2fb1ab0e85b6530335ad2f2b98f0e28
SHA512

159593a079d28ad0f95f95a005296c24ae730d8327e3817a43a49b122e8c31601a4204d4bdc43788efcd19aaf42d3b51ef86ae19b6d62deefeb838a26b8ced4e
SSDEEP

12288:KWA2GevXbiyH8c5XWZUIUO5qzUBDicW3ClS6+ybxxyah0B5mZMenTMRRA:JJRXbAcs6ITlVtq3ux0mZMeoRRA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eb94024002f1d92b4871aa2cb5624c1_JaffaCakes118

Files

3eb94024002f1d92b4871aa2cb5624c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 372KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ