343781b127811ceee0882aeb054a7838_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

343781b127811ceee0882aeb054a7838_JaffaCakes118
Size

932KB
MD5

343781b127811ceee0882aeb054a7838
SHA1

06c58314060cac912ee82f7c38a365212503be05
SHA256

94e483ae5cf1217e2e7073e16d2d5713f29514564045535b1e2456ef6e6ea4f6
SHA512

28995defdbf076b9bf992c6f9627cfd98f7e3fb299603c0aa50eb08ec4edb434b2dc49e4ef5dbc973a7d9146ca911e1371e8dc92c29754189606991a19eb68b8
SSDEEP

24576:kgrjAg5A3Pp+8oYSTKn//y3iwza3Z883JGfss:9rBsPp+zFTK/6Swza3e8ZuJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
343781b127811ceee0882aeb054a7838_JaffaCakes118

Files

343781b127811ceee0882aeb054a7838_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

sfxcab.pdb

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 707KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yvs
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE