3801323c56fda70f0cbe41558e510ffa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3801323c56fda70f0cbe41558e510ffa_JaffaCakes118
Size

1.2MB
MD5

3801323c56fda70f0cbe41558e510ffa
SHA1

dbd1c51732fa8b52135d4ebda978e463a1d6de23
SHA256

c531b0b490b164b301807654426cef5fd422f4bd30c608a41e160e82e83beac1
SHA512

09c46911e62b96fe227a6bf55c4fee616f1987395448c58ff520a9a399f43c00261192c0294e70759f47b44950b97ff3a4ccf644f14cd271b1e0e4c25a12ee5c
SSDEEP

24576:7d8QdF6UoD3/IEJ0WNFtR9KwJj7YJDCIz5TWnCAsU:eQDoD/NlyW7mWJnxd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3801323c56fda70f0cbe41558e510ffa_JaffaCakes118

Files

3801323c56fda70f0cbe41558e510ffa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 803KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 342KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 856KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ