3ace1ff43d33608a1c1098ac0414239d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ace1ff43d33608a1c1098ac0414239d_JaffaCakes118
Size

1.7MB
MD5

3ace1ff43d33608a1c1098ac0414239d
SHA1

5a0ed1053c6112bff29168bcfa345da13c263bee
SHA256

27ec58fccc25fc90802f7a37d97fd3cc5006ec9c626d7001c757b762054bf0ab
SHA512

5c57b443be1e0768fe773b39d1dbdd999b0cf3d22e0cdf5a8742b59c0b82d92097b7bd87f66a3cd49e54e3eb221a75329fc2dff5c842037ab06bb78666b6ab67
SSDEEP

49152:GM+elGJRpKQhfI/j1fHf52gpOJxFsDgMqgJQc28o:7l+RJgJHht4JxFsD2gac2p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ace1ff43d33608a1c1098ac0414239d_JaffaCakes118

Files

3ace1ff43d33608a1c1098ac0414239d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 20KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

services
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE