3953b516b88a8cc49e995707bf1ea458_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3953b516b88a8cc49e995707bf1ea458_JaffaCakes118
Size

40KB
MD5

3953b516b88a8cc49e995707bf1ea458
SHA1

ff4d9c0007dc3be87ca5ce40d88cf68baac06953
SHA256

ed03c67e2f11bce0b4152c73b19187c90b6ca87acd3349e4854091ef262e745a
SHA512

5b85845d1cc4d7891cd9877e51ee7268ddfec2533d293ebf7061c0600e9a60a5f75003520ea26dbbb9523b97923277f8440ee791ad975e0fdbe885a039d4a846
SSDEEP

768:0F+YADBGSxhy0QfKFx144U2eRH1PBCAH2li9WCqtvVE+:00XWyUPRVPgWaikCqtvVp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3953b516b88a8cc49e995707bf1ea458_JaffaCakes118

Files

3953b516b88a8cc49e995707bf1ea458_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ