3c0e74e9b425a60cf83ff942c36d5457_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c0e74e9b425a60cf83ff942c36d5457_JaffaCakes118
Size

420KB
MD5

3c0e74e9b425a60cf83ff942c36d5457
SHA1

a87de52a2799e48647487cfdd3c20f5869d2017e
SHA256

edf7b10b41d61fff192b53a0df4e3702f1bf6e1fe58de997b465b760a8b10a7d
SHA512

8d475bbddbb5e5fef972ab0611bd1602ed35b8f0bb65788e7a7dbf82a97776da0a8c584bcb883f818e8d195c1cdb24c7e53349e2c394e67642e4e55ee8b511e7
SSDEEP

6144:ykB1INZdWaFzaE7mDGg7Y4+MFyBPys80G5sEOi9Ri9na5UVx3l:ykBgdW/E7mDGg8xMkBp80GiZa5UVhl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c0e74e9b425a60cf83ff942c36d5457_JaffaCakes118

Files

3c0e74e9b425a60cf83ff942c36d5457_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ