3c0b0cb78ea541e168b68df16da8a1a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c0b0cb78ea541e168b68df16da8a1a2_JaffaCakes118
Size

247KB
MD5

3c0b0cb78ea541e168b68df16da8a1a2
SHA1

4fed0fa4621d51d16e6fbdb313f8dac4bd8aedc9
SHA256

814e8a2757d754db411c4484f58255746959ea21f7e679f0756611da329080f2
SHA512

faa14b28703e43f72742449533f8daac798b3a0d10678b266860b37936416024de17a3a49366fd57d174d4dcccf9e5502b787d1c837d068b3fe48d70ca777051
SSDEEP

6144:QnAec8cNS2dsoi2tOnNwdQQzE0TKPs/EgY+QDZCIiqbJSFJwbd42E:OA4cS2KNyjI0GUsdDDZ8Yd4N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c0b0cb78ea541e168b68df16da8a1a2_JaffaCakes118

Files

3c0b0cb78ea541e168b68df16da8a1a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 16.1MB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.d...
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ