3be603ef47eefd5f2b28f86d59659b81_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3be603ef47eefd5f2b28f86d59659b81_JaffaCakes118
Size

509KB
MD5

3be603ef47eefd5f2b28f86d59659b81
SHA1

974ae71deadf675bf30ea0203dca245ccef7598c
SHA256

b70bf315a84f26202f3d66f3e1d002a54a893dda1fbe40bf5c5f1f1668fbf3e6
SHA512

a7be9a3c7a99741a9669acd45c7af1671f3bf630a6909b21fc160595affad1c4b749cd9b0ab603247150eb9c2600258000f2bd19399c5dfa0a5e9f0256ca61ca
SSDEEP

12288:a3GpR3PohGLxe0DNMpObgcKpNN6R3SJTH2PsssBQG1qA:ZpR3Poux7DHuISJQqaGP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3be603ef47eefd5f2b28f86d59659b81_JaffaCakes118

Files

3be603ef47eefd5f2b28f86d59659b81_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 479KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 896B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ