3b325ccc6b14e2088d2713d6435fa3d6_JaffaCakes118 | Triage

Sharing

General

Target

3b325ccc6b14e2088d2713d6435fa3d6_JaffaCakes118
Size

210KB
MD5

3b325ccc6b14e2088d2713d6435fa3d6
SHA1

58e27e8c5745e2e7bbed41186c7d573309263ed7
SHA256

b1a306ac9ab25aca823cbbad2b473d8f92e87cacf1b561d9fd28afb4f9edb800
SHA512

d9fa9d1c030ae963a2d063ad89b924077dfb4218a762a91e664f6565fd7469612e9a77df62ed9550918ab75f78a4994f15c463d55ab24888a115800348adb848
SSDEEP

3072:brO6qxYRF5071m0L/yW9aeWP/ThWBf2vQ:26KDUlWZWPIBfh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b325ccc6b14e2088d2713d6435fa3d6_JaffaCakes118

Files

3b325ccc6b14e2088d2713d6435fa3d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.data
Size: - Virtual size: 240KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 197KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE