3104abed41eb5d0b31db2d15f12398a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3104abed41eb5d0b31db2d15f12398a2_JaffaCakes118
Size

145KB
MD5

3104abed41eb5d0b31db2d15f12398a2
SHA1

b274a08f5804b48aa524b03e4e4d28e452477c96
SHA256

002b00bcbfef5289579d381f33aade36a3828753b8cb7d2d6714ef650a0b69cf
SHA512

296272f24890919573a41174cb218d1cb1bec8737c941cc99739392dd244a95e8cea8934af603b5992bbe62834a64f02464fd7696d0a25c8a504be67a87dbc40
SSDEEP

3072:J9PkdIAYd0Saskdnh+n4bwaQvo9o/bEzJhe5UgfovR9:Hq7Uqh+n5/UhQpfovR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3104abed41eb5d0b31db2d15f12398a2_JaffaCakes118

Files

3104abed41eb5d0b31db2d15f12398a2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE