3836d9ef3ff4a1b596990010365e87f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3836d9ef3ff4a1b596990010365e87f7_JaffaCakes118
Size

835KB
MD5

3836d9ef3ff4a1b596990010365e87f7
SHA1

46c0d08d37bd7dd682732db1ccb11539c4ecf481
SHA256

d5767818b4f1321a46858f972ecdd068287241fab8b1cb11f44615c8598988a3
SHA512

16e346ed238c8ac04e2a6cccdbecdaaff62ba0c2947efe6b2ab362b7c4b2aba05cae66f11406268894ac0702d3befbdc9913eb8565fb29c69d8754943d763bdd
SSDEEP

24576:UH7iW3iViPBS266FKOXs/xXTIQoZ2PvY7sS3mhNIIKov:UH7d3XPLbT2HY7/3mbIIKm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3836d9ef3ff4a1b596990010365e87f7_JaffaCakes118

Files

3836d9ef3ff4a1b596990010365e87f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Dev\Opalium\Startup\Release\Startup.pdb

Sections

.text
Size: - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE