3cf47026ea81ca698d8ab4962e64e00a_JaffaCakes118 | Triage

Sharing

General

Target

3cf47026ea81ca698d8ab4962e64e00a_JaffaCakes118
Size

2.6MB
MD5

3cf47026ea81ca698d8ab4962e64e00a
SHA1

d8f9cbf1685a07aa0e22f840a2b0987d90fb1b36
SHA256

19d717afd7212dc8eb01046eefc646b3927f71cb333b84c9f192922390241bd3
SHA512

b0d4c40623ab9fdbeced6b0bc879e569544e6e2077e242763052767e7a08900b531f04633ca60dbdea2bb83383b7ce1c7eb962955b864dfd732fc13a2f351994
SSDEEP

49152:kc//////OQqyUaufy+E3EuDtRq6is9VSLbbIiJMc1wxDurHWVc6gb1sK8ywFZ:kc//////OXMF3EuOM/SLbbIiOcMD+y2U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cf47026ea81ca698d8ab4962e64e00a_JaffaCakes118

Files

3cf47026ea81ca698d8ab4962e64e00a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ