b3369635adf29d24bf9760cd267ba148_JaffaCakes118 | Triage

Sharing

General

Target

b3369635adf29d24bf9760cd267ba148_JaffaCakes118
Size

222KB
MD5

b3369635adf29d24bf9760cd267ba148
SHA1

75bb27fd8e9969c28d7897e61216dda549662fa9
SHA256

4033490797a42f532d0d68971c6f5739c3c1fdbd7eba24c08796c8f926ae0d31
SHA512

ae24f8d752078527fdd49cd6ef193542d29bed9ce6c9985796fb3bdc23444b4dccc38b2abe3a3b294f42e8bd6fff5fe4262eef9287893dc6e55f900308af9d16
SSDEEP

6144:14RYIBemxhfDKxsy9tUAmPCH4aMiZS6y5:1BIImxhfDKScejLIS6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3369635adf29d24bf9760cd267ba148_JaffaCakes118

Files

b3369635adf29d24bf9760cd267ba148_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xd
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xd
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xd
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xd
Size: 156KB - Virtual size: 157KB