e3c8c5cbfd0f1609d7370d194fc143cb_JaffaCakes118 | Triage

Sharing

General

Target

e3c8c5cbfd0f1609d7370d194fc143cb_JaffaCakes118
Size

795KB
MD5

e3c8c5cbfd0f1609d7370d194fc143cb
SHA1

882ba3daebdfea2c3e57dbb661392babeafcfcbf
SHA256

8460f094293c03a18ceb6c57ac1d3073696a2865033462d8006b8b6b1033f76a
SHA512

b9e3c65333df63951641446e73252e0723e4f28e0b9cc2ee7cbf7f082ea1d7707c7e5f5ffd36d8c465a99485e61704ab67a2a3fc16799ca9e371150ddca07159
SSDEEP

12288:2bly675yJo0juRXhT4MghC35C6HWYeOmtHL+Qz1DTjOodYSMC:h6ca0jux+Bs3HjmtHL/HcQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e3c8c5cbfd0f1609d7370d194fc143cb_JaffaCakes118

Files

e3c8c5cbfd0f1609d7370d194fc143cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ