3fd7e347274561dab49d1c5220c8b0a0_JaffaCakes118 | Triage

Sharing

General

Target

3fd7e347274561dab49d1c5220c8b0a0_JaffaCakes118
Size

524KB
MD5

3fd7e347274561dab49d1c5220c8b0a0
SHA1

8ba2e284ea6dd87a82bcff990a0557c54f8c71e9
SHA256

049114709a423c8a0adc81734c51cddee59167bfc07a59a8c1abda78c06696da
SHA512

f3193bcec4100b5f3869b2e3265cc3b2bd0cbc97fa390ef371a70ce718293b24d53613ffc25c355d9adcadd9b10f76cb51c40dd39a3ae852e1225024fc26a6a5
SSDEEP

768:632KSQgrUqyLmQJrxACYtb2gkxj000000000000000000000000000000000000j:qMKARtkxv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fd7e347274561dab49d1c5220c8b0a0_JaffaCakes118

Files

3fd7e347274561dab49d1c5220c8b0a0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ