3b71815d2128a4e5561925bb4137f19b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b71815d2128a4e5561925bb4137f19b_JaffaCakes118
Size

315KB
MD5

3b71815d2128a4e5561925bb4137f19b
SHA1

7f8e913e773b30c85909ba14708803f16e65c2e3
SHA256

dfc44c8ff9ccd64a13784cf8047dd05da12772ab6804024f02b46b99dcfa6fb3
SHA512

6a8692bd3a4fcce4c3bad7f9a6653a1e71e5abf5928f757a1a618f76f538057c8ec778ee19ae237d43d88697e4ca755dbc295ab03a1a590ea58a9a68e5b101bd
SSDEEP

6144:xKd6qxT2FUc9BTuVTAs9I0tUPf72CaUG7wq6l4u7ocYW5It9E/kV:wd6IToUcjTuVR9IoUPjKUBhshWy7n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b71815d2128a4e5561925bb4137f19b_JaffaCakes118

Files

3b71815d2128a4e5561925bb4137f19b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.data
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 307KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ