3879666499f13ff8baccffb7a8f31ec2_JaffaCakes118 | Triage

Sharing

General

Target

3879666499f13ff8baccffb7a8f31ec2_JaffaCakes118
Size

100KB
MD5

3879666499f13ff8baccffb7a8f31ec2
SHA1

42583a09ce779eb5ae2bfafbdfb714ed69d9a91a
SHA256

b0216455c937d02286cf1e2e5a382be3bcbec4195aae88b925a17b8c78ffa577
SHA512

d85f55aafed7fb19348b9509338e7a960cbe3bbaa37820928b3ccbdd87159f5e67346adb00124112ba0fcd318913a594672ea1ffa51cf15f07dcb5cb4ca641f7
SSDEEP

3072:Nw8i3iS3v7pd06yyDItsDvJBN1J6gG2dhsm2:Nw843zpdBZ+oRR0y2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3879666499f13ff8baccffb7a8f31ec2_JaffaCakes118

Files

3879666499f13ff8baccffb7a8f31ec2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 842KB - Virtual size: 842KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 25KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 80B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21.7MB - Virtual size: 21.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ