3950475b2d05fe68d1640e99376e14e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3950475b2d05fe68d1640e99376e14e5_JaffaCakes118
Size

168KB
MD5

3950475b2d05fe68d1640e99376e14e5
SHA1

26b85611caf364a264150eec846e97a686056ed0
SHA256

7e1feffbb8d4d34dd273501ad6fda72e7914f43251a08084ce7706949eb4d8db
SHA512

ee192c4e67042c91d6cfe77aae36824e192c3d104a8736df4ee9ca4cb596de9ec4aeace83af36a29372b1a60c6be7087fcd9299c27fb8570b03df88d6e33a5a8
SSDEEP

3072:Qe/GcG0D5JqJcIjG5uX97zTnF0ocjc1vonxilk4EnfPKfPdGOcPTdFGrHkMBkFh:717UTjgu1zjMAox1YVGOMNMBA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3950475b2d05fe68d1640e99376e14e5_JaffaCakes118

Files

3950475b2d05fe68d1640e99376e14e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

87876
ef3

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 277B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ