3998607522e4bcfbec3623b7a2f3a54b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3998607522e4bcfbec3623b7a2f3a54b_JaffaCakes118
Size

3.6MB
MD5

3998607522e4bcfbec3623b7a2f3a54b
SHA1

6a2d30538facdb1585db3fc7eb2cc5b424a8e8f7
SHA256

7b88cde1b7f4e2c296033b0a704a4fc975cf54bbc3e09c55aea59d01700d4e20
SHA512

371dccbf0882d2f09feb9c4fec3a08b0f58b8eaa6b52e26ba765009e440fa52a4f8a1b81e9aab1208c1a4907999195b3c0ef8efd2a9321086d83fce907d4978d
SSDEEP

98304:pVqWN2pk+yBJOwCO70dVI6kmgd+kxHuXW+LUPwn:pVOp0bOwCw8FkN+kxOG+n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3998607522e4bcfbec3623b7a2f3a54b_JaffaCakes118

Files

3998607522e4bcfbec3623b7a2f3a54b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 713KB - Virtual size: 713KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 457KB - Virtual size: 457KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ