3f44a3882043a8e5ca5a1807c3ea3faa_JaffaCakes118 | Triage

Sharing

General

Target

3f44a3882043a8e5ca5a1807c3ea3faa_JaffaCakes118
Size

303KB
MD5

3f44a3882043a8e5ca5a1807c3ea3faa
SHA1

0837b4510315eae62c1d65d361513bb0f9bbfa35
SHA256

6d9f9a82158a9d886ef7034196221c5b8e683d39838221eaf6c86c85a6a3f955
SHA512

4a19aeb5f36d862affd7408f2b89131457f0b54c8da47e4bd365d8490e2d7b9cfe0a0261b42405f3718e343cda2e20e0524b71e7930dd9599eea36c82f53e503
SSDEEP

6144:31q49/wVxrFN/VHwB80oQNnQqtonCRKWVsAXWI5cNihJneSo9SaB5uYe:39OVR/VI89gQquC7vbOihzR+e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f44a3882043a8e5ca5a1807c3ea3faa_JaffaCakes118

Files

3f44a3882043a8e5ca5a1807c3ea3faa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 890B - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: - Virtual size: 3.0MB

.loader
Size: - Virtual size: 424KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.entry
Size: 278KB - Virtual size: 280KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 923B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE