b3de1dd0ec169fb77fae64647f77b524_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3de1dd0ec169fb77fae64647f77b524_JaffaCakes118
Size

4.7MB
MD5

b3de1dd0ec169fb77fae64647f77b524
SHA1

0136a8f124ddb58dd564525e80c64d9386afa61c
SHA256

e1c312518b4f373b18d60a78f5f155e06d654e35ccc4347fbc7186f0840c7194
SHA512

5075b7ae9d71ceaeaf537e1524f99a3f5fe4495349fe6c42d3ca0fcd7d84879c345a290c6e186e755ddc7b98dc904c81fc4f9343d04a87472d03d63e3b8271fd
SSDEEP

49152:8kusiTIgnsYHqW8jpj+TTkkqNEZLCtBDcP998zn:80laqW8jdpkqNEwtBDe998r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3de1dd0ec169fb77fae64647f77b524_JaffaCakes118

Files

b3de1dd0ec169fb77fae64647f77b524_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 960B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.stls
Size: 290B - Virtual size: 290B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 536B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ