3d6d5cf1903803089906377b69b37840_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d6d5cf1903803089906377b69b37840_JaffaCakes118
Size

132KB
MD5

3d6d5cf1903803089906377b69b37840
SHA1

79007299671610b8ebb744df4f1ef992cd9294b4
SHA256

79a45637e9112aa6aea40e60c09217cb0809af384b4e08c53665f8efb5e33383
SHA512

4177aff6d15fd93c80314991940ef0ba5ca295786033642cc6fb860feb51706960928535eb81dd7a667ad18572cf79598e87494ca5f21e10f806b3fddee1b24b
SSDEEP

3072:IrttRVTxvzOjjQ6m74axy4MV31trbdMh0AqgGTvDr1Ft6Bo:IptRVTR0k6c1MV31hxMNXGTvDr/t6Bo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d6d5cf1903803089906377b69b37840_JaffaCakes118

Files

3d6d5cf1903803089906377b69b37840_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ