3c5b3118077ca24fc2307a2f7651dfde_JaffaCakes118 | Triage

Sharing

General

Target

3c5b3118077ca24fc2307a2f7651dfde_JaffaCakes118
Size

439KB
MD5

3c5b3118077ca24fc2307a2f7651dfde
SHA1

9f3e249c6a51112859248eb5f31bf6b1d07d93a6
SHA256

13eb04e710a06081d7f91374ae573688228d6c3d53817eda7ce2a61e395b0cd2
SHA512

20e7b67a4c1fe1b946b689736606390acf310d21e19bea678d11c5f677c38900e4e4ab2b5632dd4eeeb06c9c26244be6d13ea23498cfe13c48a56593dbce264f
SSDEEP

12288:yehw9nt8gVYnHiROCclgnzLEWQ519BSY/9LZtPEfgAbCC:yehw9ntdVYnKOBlGzUbzSC9H+zeC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c5b3118077ca24fc2307a2f7651dfde_JaffaCakes118

Files

3c5b3118077ca24fc2307a2f7651dfde_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jgd
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE