3cfd8278f2000b8d6fdbcc55b940c3ee_JaffaCakes118 | Triage

Sharing

General

Target

3cfd8278f2000b8d6fdbcc55b940c3ee_JaffaCakes118
Size

333KB
MD5

3cfd8278f2000b8d6fdbcc55b940c3ee
SHA1

3a32e9228736f6c943093627ea3bd59eb6c59f95
SHA256

209266ac5897f6dc1fb58f4a7ffef2052319ef888867e7ec74887b477a97ad8d
SHA512

5131311924206fb299fe9e12c88f2ac7f9cfd57eae4a2c7f3eb0637428b0be5f7b84e3fb7112a6375a1b7edda36bdd4fa240f02514b5f459673df90424be0204
SSDEEP

6144:jQyPo3BORsm4slF8UvEwVw+R0cyPu6qFXmo0efmkl/Lrb+axqv1P/D:jQ13sRsmDGc2+RRFXm6/HRxk5/D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cfd8278f2000b8d6fdbcc55b940c3ee_JaffaCakes118

Files

3cfd8278f2000b8d6fdbcc55b940c3ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

\\cpvsbuild\drops\v7.0\raw\9466\vsbuilt\retail\bin\i386\vs7jit.pdb

Sections

.text
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vsp
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE