3c58e202f86253b1bed6ab0ee1409f3b_JaffaCakes118 | Triage

Sharing

General

Target

3c58e202f86253b1bed6ab0ee1409f3b_JaffaCakes118
Size

564KB
MD5

3c58e202f86253b1bed6ab0ee1409f3b
SHA1

eb5de7c750359fb31d83dce5a2ff16a839d00227
SHA256

9d674762cf0040475f66e78d0a5256ae0ccb298419b665cf0864c3fd8a680f39
SHA512

92401df108230b293de3043f868bf3a115a9124752a72b59c90191b002880eb2f0f3b32a136a8072f84fffb892e44a60a122fa3b620564df3f2828807426c7d5
SSDEEP

12288:zDWAEE9zYq5Uzz28pAJSM3EF62pVjeB3gQU05iVZuJ/li:zaNE9lyzz28p5MI6KjeQM5iVZWti

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c58e202f86253b1bed6ab0ee1409f3b_JaffaCakes118

Files

3c58e202f86253b1bed6ab0ee1409f3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 618KB - Virtual size: 618KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ