3d384ea84d84a4b606396f2650df5100_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d384ea84d84a4b606396f2650df5100_JaffaCakes118
Size

959KB
MD5

3d384ea84d84a4b606396f2650df5100
SHA1

108254a912ea62190b2fd14e55d0fc3838df874f
SHA256

e121925566435c3cdf2abaeb5548d0f4112db4459618ef249b5cd5feaefee53d
SHA512

36e3dbfeb06d17df65c3fa90772364e3fe728837cc81634eb747a395970ea531c7e78713a72253d4b536672b4953b702f98a27feba5ad2d0f6c8385ecec7fa2c
SSDEEP

12288:uyohl3vCaQ8Gz4/xuVXEerSh5QL/yWXu/A+Gsr8jqcN56gd6:FKlqaQJgu5hGDgaYRM8rjd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d384ea84d84a4b606396f2650df5100_JaffaCakes118

Files

3d384ea84d84a4b606396f2650df5100_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 617KB - Virtual size: 617KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 277KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ