3894e0cfccf94b9ef209a360be6a33c1_JaffaCakes118 | Triage

Sharing

General

Target

3894e0cfccf94b9ef209a360be6a33c1_JaffaCakes118
Size

1.1MB
MD5

3894e0cfccf94b9ef209a360be6a33c1
SHA1

f25c59d3fc22be491f03d909d258a929fd3db6fc
SHA256

5d9419889fbfe9129ee827ba1387bda1f35bbffe6231e902611a941c11d0f5b4
SHA512

14b7210750b39d00449528bc4babe8660113d5eac6e6d4b1f0278959678f79860fcb0b9a348cb45e2b26711a065fef573af075315fab53527c28b21b5af12355
SSDEEP

24576:SypW9SgLNZaOdcTMuUvxIgzroxyKAzidlK6Hr2LbKoHEarV4xU/BxNaGRrqc:St9SgLNZa6xIoroz3K6L2Lb3Hm+BSzc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3894e0cfccf94b9ef209a360be6a33c1_JaffaCakes118

Files

3894e0cfccf94b9ef209a360be6a33c1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 324KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 748KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 676B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ