3c59a651c0f04dec8248d290e3c3f5fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c59a651c0f04dec8248d290e3c3f5fb_JaffaCakes118
Size

381KB
MD5

3c59a651c0f04dec8248d290e3c3f5fb
SHA1

6d70fe0541f61f9ecb22c8afa5327fc1c537dc66
SHA256

1a4a77f4c3a4360d01259f954dbb4cfa509a37406f1ce7df67993d751850a523
SHA512

92cb1f55b18043cf5101567fc858d383a01c5458b76ff147ef89e3f4f19296b9869123d4aae37bf8468aab4706a357480015f9b1d1f7a00ef07024363a68c78d
SSDEEP

6144:ghU7tvV0+/l4SIcnpEg51/BacvUZ3KQ+oa59JbUve3yBuYnM5:gwtvVv/eSwWB/+mJYoyBuB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c59a651c0f04dec8248d290e3c3f5fb_JaffaCakes118

Files

3c59a651c0f04dec8248d290e3c3f5fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 329KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ