3c01a046cc6ca6637138a1d1a97c1d84_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c01a046cc6ca6637138a1d1a97c1d84_JaffaCakes118
Size

1.9MB
MD5

3c01a046cc6ca6637138a1d1a97c1d84
SHA1

3e8b422ab568e1825f76c9cf3c855e5cbe3f027c
SHA256

e9aa31d4a49572bd82d3d20d7170f3f71ec3a86e706c334705c2f7318f4c3a7b
SHA512

21f89c7f9fb4c03dc356e7895bad88ff195c575d820ba6fc740fd443002a813b4bd1469c2eeabc19db232ab7ec402534f1be544e52e8ab594b34e6391ea46d44
SSDEEP

24576:4r7rzcmIFFrmVeV3IW2N71OKny7H6PjlcDbTMQ6Q/5qWmQh+uYnCu2ZppWgH45XP:3mVe5DwZYH6PRi+jCrJeP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c01a046cc6ca6637138a1d1a97c1d84_JaffaCakes118

Files

3c01a046cc6ca6637138a1d1a97c1d84_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ