3aa32103e9c7719e0678bea525b8473d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3aa32103e9c7719e0678bea525b8473d_JaffaCakes118
Size

1.6MB
MD5

3aa32103e9c7719e0678bea525b8473d
SHA1

9d454ed1cbe6d90ba66c4ee29d5703849a17d942
SHA256

b0199993d2fa4e9e9ac160b99edaa5e987701876da459a14bc735e8b41631168
SHA512

ec0cbe3f9913f1e64ff0caba4f02c3dad9e27b4818b8c3a6c61b3e0000b39e90aa1e2bd5a9afb2c989cbd712d984d32c7ff0a332933d932f7019288d4d882dde
SSDEEP

24576:o3QOURPsEZnWXU4reYwPLQU5cgiFwa9y/T43msrqIQtIytq1ZV+wl7Cr9s8rJA:o3QZ5WyQ4iFwM+sriTtq1Jerfi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3aa32103e9c7719e0678bea525b8473d_JaffaCakes118

Files

3aa32103e9c7719e0678bea525b8473d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 458KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ