3ec8b5d1ea249f9709ec08af23869197_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ec8b5d1ea249f9709ec08af23869197_JaffaCakes118
Size

798KB
MD5

3ec8b5d1ea249f9709ec08af23869197
SHA1

fa8357b5e4e409f51913d3c5cae21b4f4fb731f6
SHA256

598c2a2db09212d552acd8ed62292640ac233c20b47c48f70808f1c2f4594913
SHA512

6336eea06143e341c094ffba0ec1264ee34cf57ec926e674db35bf4e6f84df8a41867336aefefbf8b25e2bc08acc3ebdf183c92cb0726a20a063cb05f141a261
SSDEEP

12288:OrWDH+nInCQ73nJOOAD+EnHyj940Ub9W5QGKBvVnjosq6:OyWJQTIAEA6Pb9W5QGKBvV8s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ec8b5d1ea249f9709ec08af23869197_JaffaCakes118

Files

3ec8b5d1ea249f9709ec08af23869197_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 650KB - Virtual size: 650KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ