03791e4ce7e9484b1e6f9c7f67309275_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03791e4ce7e9484b1e6f9c7f67309275_JaffaCakes118
Size

798KB
MD5

03791e4ce7e9484b1e6f9c7f67309275
SHA1

0c8a1138cf98500912067784fe56ced7237231da
SHA256

d1b40397d9c57f4cc443778753a7b09635f7d10dcbdb0b8018f7cb8d3194a736
SHA512

5bb7f979efef3ec518992ba0320519ad0bc6155da46a0448af1c74c764048b9afd392e9ace2a46a1713f1cbc9363895e0cdbbbbc4c17acada60657e8b6046e3c
SSDEEP

12288:oM/3YVqy0JpT9UY6NvcXfhkdlYhj+LjBrQ736:oMvYVqy0D2Mhk3Ij+d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03791e4ce7e9484b1e6f9c7f67309275_JaffaCakes118

Files

03791e4ce7e9484b1e6f9c7f67309275_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1.0MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ