3cab3d04e3de412b58218f7faf6555f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cab3d04e3de412b58218f7faf6555f4_JaffaCakes118
Size

369KB
MD5

3cab3d04e3de412b58218f7faf6555f4
SHA1

6b07be4849994b972c37f998efae210f23204e71
SHA256

145697dea4a4ba8648c78375fad78fa6216e3b8e1189b58c86899002c7202c82
SHA512

240e037ce8b3685962b0ede2a1a1ffe0b94bdf19d3e38a66925d68154a8f9e1c905d8125663c7a29dac21d0868872160c11022ef406c280e0801b5e7137ed9ef
SSDEEP

6144:F7CGxQfzxvKfAlncqFlCYCjil2oqWCJYMnmrpYw/A3W7petDt:UGx8z6AKYwWKWEqY3WUJt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cab3d04e3de412b58218f7faf6555f4_JaffaCakes118

Files

3cab3d04e3de412b58218f7faf6555f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

outlook.pdb

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tqn
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE