3398e917eb8bd785eb64989b492302d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3398e917eb8bd785eb64989b492302d8_JaffaCakes118
Size

14KB
MD5

3398e917eb8bd785eb64989b492302d8
SHA1

c28fbe6e0e27131a144f50bf344f54e11abe94e9
SHA256

14467db8fdfd47699e56e7b0d00fa6c0db3d92af866c2e42d362ab6d9389053e
SHA512

24bb13c562e4088f07605c5fe783d066b00cdd18257b5f7d3341041d7d45f0cbf736d828ad4ad988afce7bd0cb6b5369e98de5a9f3c6dacc8dc8a06dc913ff57
SSDEEP

192:oZ/V6cjQXqM4jJfjeUudxCwMgohVne/pQZxBF+nB7mVB1zuK04Xr:ob6j0jdexEhVgo/F+nB7mVB8u7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3398e917eb8bd785eb64989b492302d8_JaffaCakes118

Files

3398e917eb8bd785eb64989b492302d8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ