3c7c799c718282aeadee49f01750751f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c7c799c718282aeadee49f01750751f_JaffaCakes118
Size

932KB
MD5

3c7c799c718282aeadee49f01750751f
SHA1

f032aa031672d4625430d1abc0dfe4ff4aaab168
SHA256

2be6bcbb3291fc4c2c3a833518d3fe1a6a5bc72b2b86c7df35586074932f80f9
SHA512

f1eab69365f5c1d9d413acc46edda69b2f499c1a606efc12e33581c8e0871a7720576314a8c7d033027526659545794b5079fc5bddc58e48077ad11becf61fab
SSDEEP

24576:ZXFUaokCnO4SR9bUK3ifbGBTkI5xy/Ua:ZXFJ4YlvMbcTIs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c7c799c718282aeadee49f01750751f_JaffaCakes118

Files

3c7c799c718282aeadee49f01750751f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 679KB - Virtual size: 679KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 16B - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ