3852dbf9b6ed05b3d4cc50107b8ab3ef_JaffaCakes118 | Triage

Sharing

General

Target

3852dbf9b6ed05b3d4cc50107b8ab3ef_JaffaCakes118
Size

101KB
MD5

3852dbf9b6ed05b3d4cc50107b8ab3ef
SHA1

5e5fc8936814cadd680058e459d5b632f687af8b
SHA256

1545c6027c1f7564b5e55b923623d83051463ee9359aebfa7ff6673b6329baad
SHA512

aa03eb6db1e9a2885050da14edba49a1acfd0c71f3ff0fedb29089a8d3b7c96c94fc5548e3a52c24dfad0901d7aef98ecf937546ece602e8fcf9fac341237e47
SSDEEP

1536:Z7rM5BjU/ByDdVBWDOiUf2mDLDCDb/tDLnDaNCIDEoITPX:Z7gHvBTPiUf2mfm3/tnWNCIYX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3852dbf9b6ed05b3d4cc50107b8ab3ef_JaffaCakes118

Files

3852dbf9b6ed05b3d4cc50107b8ab3ef_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE