3eb94de3798edbb391e24406c0515bab_JaffaCakes118 | Triage

Sharing

General

Target

3eb94de3798edbb391e24406c0515bab_JaffaCakes118
Size

305KB
MD5

3eb94de3798edbb391e24406c0515bab
SHA1

b691a6f180c37249425fbb8416fdeaa47fe65b50
SHA256

a17bcd0eae917a1e4183e2e50816f36ecef99ccde42370687e91a243da8ee93f
SHA512

5a2def33d3e5eff45a14e6830fc51fc8a4aac5fdb06023b05409905e9404eaa866216fd438633f21b7b3d3ca62d626fd2a74879b2fc0cfc357847eb81fabe720
SSDEEP

6144:9aRAIAo+UJSex2PikNd7gilX0xQSbmTemZ5R/tTUjOaCKowvV2AP+VpqW9ESCpeA:edtWd1aztP+br6vpeA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eb94de3798edbb391e24406c0515bab_JaffaCakes118

Files

3eb94de3798edbb391e24406c0515bab_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 857B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ