3324a5616886ea7e5d758a6c3f060f15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3324a5616886ea7e5d758a6c3f060f15_JaffaCakes118
Size

244KB
MD5

3324a5616886ea7e5d758a6c3f060f15
SHA1

5fc0554b1b02c144862c711bf6983133d854ca69
SHA256

cc1ca8a9ececd4990bc35327ce7f59e7d27d216a26e88043405a679d91528e2a
SHA512

878371bb564e525eab8b6cb79542a10e2b06f2437506ff29d4ce598f22da0e6c507d7683e38b96e980b1482be79b0808a0ee7f5f0bd51ceddd94fe35617c3b0a
SSDEEP

6144:h4sCa4TcM+8mcwO2dMqnRZf0SfXdD8w9Rv7E:WsCa4TI8mnfdMgxR8YE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3324a5616886ea7e5d758a6c3f060f15_JaffaCakes118

Files

3324a5616886ea7e5d758a6c3f060f15_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 802KB - Virtual size: 801KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.conb
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cona
Size: 512B - Virtual size: 27B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ