3090021cae04f5f87e8dee6aca6f4649_JaffaCakes118 | Triage

Sharing

General

Target

3090021cae04f5f87e8dee6aca6f4649_JaffaCakes118
Size

2.2MB
MD5

3090021cae04f5f87e8dee6aca6f4649
SHA1

4789f0648955d61053f48fa91fc6a328e4594acc
SHA256

ef39b53ebfe97c49867780d6799c52d2ed7d7704c61abc92298c732e4cdae83d
SHA512

77e36568a9d9259dbf3a4c1b0f599479620dd90ea2a8a162b7f531aeaebd3c50b88cc160ac10876468994b0d6fd6dc1871411aa71ee4574577339ff30ccb0331
SSDEEP

49152:2tvhMzyVkkur5QrXZlcZO+BA4FVuGiOsMPzs9w0JmZorNODfQaQZVvCr:2tvhWyVU5QrX/COb4j2MPzs93mZorcDN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3090021cae04f5f87e8dee6aca6f4649_JaffaCakes118

Files

3090021cae04f5f87e8dee6aca6f4649_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 400KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ