3d8eb390d2d9e3644fc9c3964404fab2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d8eb390d2d9e3644fc9c3964404fab2_JaffaCakes118
Size

3.6MB
MD5

3d8eb390d2d9e3644fc9c3964404fab2
SHA1

f3b9f6cb4007f60aa3c06fdd85d29b849f51fd57
SHA256

e2bb290e68644b1d70ef633ac5a43451cdf5d66688d7a22c99021791e5c01c69
SHA512

a227c9971104121d6d5d4c6db6267f21f02822c9c75949376416bff9dce3937fb7b1d977bca619c629d48861bc86eb51d9973ebb4424e8236f3ea365de090188
SSDEEP

98304:/Xdnmrp7rnjsFuO44alLPWTvAcubLV6CHK2ATbE:/XxWfnjKuO44MLPWzBKV6uGE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d8eb390d2d9e3644fc9c3964404fab2_JaffaCakes118

Files

3d8eb390d2d9e3644fc9c3964404fab2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bohuj
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fovedof
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ