3dd462ec629eef8d8d518d1a4e987fc9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dd462ec629eef8d8d518d1a4e987fc9_JaffaCakes118
Size

690KB
MD5

3dd462ec629eef8d8d518d1a4e987fc9
SHA1

0280441bf969f2e9568431fbb6d7531d6c205e8c
SHA256

b1368f4e9fadec71a0e699b0a88443cfe40ebc56eb4fdf184242ba904593f02b
SHA512

d5dd5d6ecb000c613c35d4f41d46b7ee05359041bcaa7e9e2bee6c79f9c856bec58fa9c0a411a5003a604a4c8e8cdc4543d5c0eb0551b5e6dbeb240c11b6d575
SSDEEP

12288:9EDCJJDXb8qWvvMyesvleMkWzChpBTfgYvVtcgwSuLnKtTF:9mQGbvNvjkJPKuMlXQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dd462ec629eef8d8d518d1a4e987fc9_JaffaCakes118

Files

3dd462ec629eef8d8d518d1a4e987fc9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 587KB - Virtual size: 587KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ