37bdf5e30f7242a7d456bd0bf575f707_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37bdf5e30f7242a7d456bd0bf575f707_JaffaCakes118
Size

210KB
MD5

37bdf5e30f7242a7d456bd0bf575f707
SHA1

7880f752c2602be98bf36653f07b534697b76952
SHA256

9c423d54e8cd572df76dd09d188177d4a69f9b4425ff853c393f647f3f0eccd7
SHA512

334eccabfe14a2863d2844a64de81f9d5bff9a8392f1a65186ba6fb7f3a75ea0f611dc5d8c032cb771fccc4b140f6468289ce8a3db0535ae2a7d317848ce17de
SSDEEP

6144:3HPb5jOr79SCKlGWQlTLLxa6zgr76aBXx:fb5j0RzKgLlTL15zSj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37bdf5e30f7242a7d456bd0bf575f707_JaffaCakes118

Files

37bdf5e30f7242a7d456bd0bf575f707_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

winrs.pdb

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE