3997bd9063f9ff224dfc7cb1f7ffe189_JaffaCakes118 | Triage

Sharing

General

Target

3997bd9063f9ff224dfc7cb1f7ffe189_JaffaCakes118
Size

209KB
MD5

3997bd9063f9ff224dfc7cb1f7ffe189
SHA1

da689a4bb7da79889e33c43806ac35ff8c0d343f
SHA256

6a314ca0254cac70c77dda63414d9b2a1a8a6726555f4837863b1e4e9d2e6e77
SHA512

5f62e4064e8b9c15779dfc40fbcfe7a0b268578ee943bfeaf0bc1596a648daa4f29aef040c147f69a88127e489510c05b6652667ad2d63f43965a1aad1f65c41
SSDEEP

6144:IWEM/b1DOxiVHpzpyvw7kRriSMSPLUKIRhC3A:I7M16EHyvwyriSrLxwhCw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3997bd9063f9ff224dfc7cb1f7ffe189_JaffaCakes118

Files

3997bd9063f9ff224dfc7cb1f7ffe189_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.weit$l
Size: 1KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.t623ai
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.$4895f
Size: - Virtual size: 11.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.q1rk2j
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.q50$p6
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 3.0MB

.packed
Size: - Virtual size: 448KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 206KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE