3857faa26670ab57bee40a83dc8520ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3857faa26670ab57bee40a83dc8520ba_JaffaCakes118
Size

114KB
MD5

3857faa26670ab57bee40a83dc8520ba
SHA1

1be96285793c7ef8b9e658e199f1037d4945eea4
SHA256

e219cf416d0ac9538ce6147ffd791f4aaebcb9f4bd088df4aaed0fb3abf2fc29
SHA512

67f1d34e213501047629353bdbae8f198bc1cbec7d6eaac53c78199bf4ed695d296a8f36db539e5ba07fc2d45fad649c401b9f8b683f0090dfd61b52f781267d
SSDEEP

3072:/XAtWYKBlVVUGAbRAkwUikDida6moNyc0gKyX5aIg639:fAoYKXVV8bJwUzY0w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3857faa26670ab57bee40a83dc8520ba_JaffaCakes118

Files

3857faa26670ab57bee40a83dc8520ba_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE