34cbaea1706ebbda0cf29c2268697e32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34cbaea1706ebbda0cf29c2268697e32_JaffaCakes118
Size

568KB
MD5

34cbaea1706ebbda0cf29c2268697e32
SHA1

8f03af27c274684400c4e32e450ce23c9990539c
SHA256

22ad0360f3f401892c66afe730b1b5bbc92b22bc8d2c186daf80dc12a99177f9
SHA512

4d3fb507870303c3ebbe1013b897623abe54d94f8717d1ee180f2d34b979c42b22adbbf78be1eb26b733dc7f933b946c7f31a158df7c26e408a5b60495243a9b
SSDEEP

12288:UCkNtQMMxsunpouatAfDeePrSTEtL/Hd/EBYv0fR1:UpNWsa7eMS6B/bv+z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34cbaea1706ebbda0cf29c2268697e32_JaffaCakes118

Files

34cbaea1706ebbda0cf29c2268697e32_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 596KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE