33368a4efd72b3ecde63257d6c992946_JaffaCakes118 | Triage

Sharing

General

Target

33368a4efd72b3ecde63257d6c992946_JaffaCakes118
Size

904KB
MD5

33368a4efd72b3ecde63257d6c992946
SHA1

fa4dae14b89fef9066146b479b7fb805d09a5dd6
SHA256

16a6670b3e364a42aba23885881a51458f4231189f3ba1265f0330b44cef5b04
SHA512

5247581f14424267ef71b98c1a926c112419f79c529edf171c44f7a38695bb5799ccdcb16626d9fb6083f2ea41b8e15768ea512df5106ab59b0caed71114e0b3
SSDEEP

3072:ft2cWtTBfVkfqM2SCAygRjlIqZoFzJcqaEf:hWtTBdsqEPxjjoFz1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33368a4efd72b3ecde63257d6c992946_JaffaCakes118

Files

33368a4efd72b3ecde63257d6c992946_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ