3812a435de0c85af646bc14421db4d6c_JaffaCakes118 | Triage

Sharing

General

Target

3812a435de0c85af646bc14421db4d6c_JaffaCakes118
Size

41KB
MD5

3812a435de0c85af646bc14421db4d6c
SHA1

31d9cba3d588e91d3d3607ad6512c6f92802d579
SHA256

284cdf76c27b8b4a273ab7ba977de3d2c66467e45c2f0d062bbfe08132aef07f
SHA512

7e821608429a8d4f531c4e5c81d9c66d62b5167aaf74f62d47fb556d8cf355fa7f03fe7ac3a8ea2443286be89c2f5894fa606760d56cb563f8e523df00cc39f4
SSDEEP

768:XxxXW9Zt1xRaI6vIUVZNPsk7b7cGQURAIIswd6lRqI5M48v:XSAvVzNPFbzQURbIswEln5M48v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3812a435de0c85af646bc14421db4d6c_JaffaCakes118

Files

3812a435de0c85af646bc14421db4d6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.conf
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nah
Size: 899B - Virtual size: 899B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ