3820002aed60b77a47a9e181b5c49932_JaffaCakes118 | Triage

Sharing

General

Target

3820002aed60b77a47a9e181b5c49932_JaffaCakes118
Size

385KB
MD5

3820002aed60b77a47a9e181b5c49932
SHA1

2cce8f7c9ede3d98d6ece658096f7d9aa5116a89
SHA256

267e357c414d9845a27f842c102f7f1adbab2a6079e524dc822ae31755de285c
SHA512

77c373ce839f7191a517461427e4f59bc744c286f9b8b2a639302180122e326e2ea2f70f541cccf7269fd6869c794d7fb7f95114ada7ca990e72c7ccff7a76c6
SSDEEP

12288:IaWNjjGnGyEHsxamajmJwJH3slKy3mwo4fPB:buwGH1aGclcKfPB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3820002aed60b77a47a9e181b5c49932_JaffaCakes118

Files

3820002aed60b77a47a9e181b5c49932_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ