3058411d1eb8016100bdf2bafb2c16c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3058411d1eb8016100bdf2bafb2c16c8_JaffaCakes118
Size

1.9MB
MD5

3058411d1eb8016100bdf2bafb2c16c8
SHA1

82245861f34bd36530212f6b99cdd7c8433afa52
SHA256

7101ab5b44a907319547f7aaa52d7b82fc5269a913df97d0bd18ee9bde0dbcff
SHA512

a1c7dd74ae7479b412405cf86af3fea2d0b3368d5d67a28700f3e42a757c560025be8debc7694d4d9b98dc582aeac5c694ffb425325167942d871caff58f7807
SSDEEP

49152:oCloP2NaBOrJ0QMqAeUI/m9ufttr/xVyIaJ2aXWI:NoeoBIaQMqSI/D10N21I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3058411d1eb8016100bdf2bafb2c16c8_JaffaCakes118

Files

3058411d1eb8016100bdf2bafb2c16c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 350KB - Virtual size: 349KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ