3c6e2af598c336508a62b8efbf4e5b92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c6e2af598c336508a62b8efbf4e5b92_JaffaCakes118
Size

131KB
MD5

3c6e2af598c336508a62b8efbf4e5b92
SHA1

236e8163f61682d2812e94fc8cf3db9a279d9d7c
SHA256

f5b7541a9f48355beb23497f0227ddd27b3e2ec81be2927165a5088434db8caa
SHA512

35c0d50dca2915ca4c153d0309612b30de55df5684b397a6c51b86a0a2b2c384a59c51252b6ee29414734cb58b118b6ceb36d349e6cde57817eec6861d1710c3
SSDEEP

1536:RlqQEKLbWqHEnP+g59dGJZA9gQwz8kmrGgxhqSPEUOkGJSzydZdrhzR05B:pDWqyaLYHcDmrGgLx0kxsThF05B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c6e2af598c336508a62b8efbf4e5b92_JaffaCakes118

Files

3c6e2af598c336508a62b8efbf4e5b92_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ