03f681dc1a4dcf771be3f541ce7997f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03f681dc1a4dcf771be3f541ce7997f8_JaffaCakes118
Size

3.0MB
MD5

03f681dc1a4dcf771be3f541ce7997f8
SHA1

516a4936ec7bbcb734c1b72f0b1daedb77f02967
SHA256

261ccd7953b8f3aa023b4a59de038042ff279205a6b0506cb9c35d0161248cbb
SHA512

9d70592c747998116c69b16c3e4a4e14aaa8c10348bbd84e52dc930196aa4550b39913cef72f2e144e1972185e7d652dbb57b22b9754b480d969d3835da06c0c
SSDEEP

24576:0fHPE/wfT1iZ14K/cocQtUDRucRwNb/J51SrbDY+94DiyC1lwpsEimkyVcpyerbX:0fhcJc5sr5Q5i4mayS25I9yfqr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03f681dc1a4dcf771be3f541ce7997f8_JaffaCakes118

Files

03f681dc1a4dcf771be3f541ce7997f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 56B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ