3fb56e052116e6f643ea7464f7741a65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fb56e052116e6f643ea7464f7741a65_JaffaCakes118
Size

518KB
MD5

3fb56e052116e6f643ea7464f7741a65
SHA1

68527ce25939fecf9cef8a90d05aa474d1c065a1
SHA256

abd98d47517feb178b8f2041b16fef8e33c7e4b898806793fc0a4669e41b1c14
SHA512

0c7c03ec52b3269855926e445815f9b27be41b351d1da1f1d05d4d451f3cda55cc0fa6c6a1b0f7dfab5c71f409dc5f2a3a792e60de49f1a85efb873ac65b0adc
SSDEEP

12288:BP3o/zjNc9yeifm/Ers0y2SoJ4I6OOfixZc6iqFN:B3EjNcYeifVs0yLKas/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fb56e052116e6f643ea7464f7741a65_JaffaCakes118

Files

3fb56e052116e6f643ea7464f7741a65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 6KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Frankito
Size: 373KB - Virtual size: 896KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE