3733038f5376358d3effe44c1308747e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3733038f5376358d3effe44c1308747e_JaffaCakes118
Size

320KB
MD5

3733038f5376358d3effe44c1308747e
SHA1

1f5f82b2be7bb3c9a930c1f4395688c1b7313b85
SHA256

ad7bcc886263e562982597d783999feb66b9aa3a7d3922914ad2f33cc92d5d96
SHA512

1605ce2904121aad7bf38160dee825f24af554318f3088bebdcc0939d1618f6474c729190decc9796ff872f02a6a084bfdaae60d61253225cfd58f640bb6dfdd
SSDEEP

6144:wyHP7/GdouNeZrrfWTLC1tGoBhQg3C60l64RyuIRqoSXp+wAq:wyHbG6uElreTLC1UoBfC60lL85egwZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3733038f5376358d3effe44c1308747e_JaffaCakes118

Files

3733038f5376358d3effe44c1308747e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

imapi.pdb

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oli
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE