3d09767bccdd1c9bcf6d0254bb8f14b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d09767bccdd1c9bcf6d0254bb8f14b1_JaffaCakes118
Size

370KB
MD5

3d09767bccdd1c9bcf6d0254bb8f14b1
SHA1

e0f8f8b639fa52b642a4b7e36751933f307e1823
SHA256

680fed0859a04f8963c4b14ff65532f34be502a963b171cee1c6e5d03f7f9885
SHA512

a1ca0652251d12b3f1482dc286cd48ac57a127ce9eb3e1af10f7da674e5a8e9e6fd828bf49ea4469d5eea3224f32c686b39f1f736c9c035bfc691cc7fcea6f04
SSDEEP

6144:ZYX/Nfj+4NGV1ioYe2xC+iLFGvRgjlToQXHw2Dr+rNgnE7rFPqVM4Y8Ul:ePN7pN+1ktqWQlcQXMgEXFwDa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d09767bccdd1c9bcf6d0254bb8f14b1_JaffaCakes118

Files

3d09767bccdd1c9bcf6d0254bb8f14b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 313KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ