38161309837ce95d3101c3e475bffb4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38161309837ce95d3101c3e475bffb4d_JaffaCakes118
Size

366KB
MD5

38161309837ce95d3101c3e475bffb4d
SHA1

22eb2ed9187490a53b0ce93b595522bd1c960119
SHA256

51bd58c02e4741562f651c27c2fe164c7103abe15b6e71b5110c7a19d2c290d9
SHA512

40cd19c68a54db980dbe211ed4ee037132e3040e21cc470e30febb7c4aec48e770c02224060ec3c8a865ddc4ecc5dcf9efcc20aa2499dfa315b57e92f2b7707c
SSDEEP

6144:/Z4+NSdIxZxfxmSuli/rJQIx3xVcjKdVRDIzCNzn/UYGqiG:/HYWPwi/rJ9ncw/Dzr/FH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38161309837ce95d3101c3e475bffb4d_JaffaCakes118

Files

38161309837ce95d3101c3e475bffb4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.doc
Size: 162KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ