38c1b2f74eb72f1ad3c3a2ed7ff4dd4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38c1b2f74eb72f1ad3c3a2ed7ff4dd4c_JaffaCakes118
Size

2.1MB
MD5

38c1b2f74eb72f1ad3c3a2ed7ff4dd4c
SHA1

efb028c220e3755f27a7160817e77d3bd7603696
SHA256

0da2f6aafee2ff88e1093dcb702ab324f6c58e65f15a7d0b258dd857bb1e4ba5
SHA512

18b593c201afd88bd8d6f27c6c8911886cc88dd1c690a1e036cf954432ea8c573b39a604ece0724df7c1a6b13119fe29409003421eeebced25eccbd558628153
SSDEEP

24576:ez/HlD+5rpHOhU5v3DTxMs5hXbks7Ol5okV9cGLsBn82MnX0DMYc46IhM/vXhgl8:pc+dtPUOR6VXcpmSG+3U9VX8OEe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38c1b2f74eb72f1ad3c3a2ed7ff4dd4c_JaffaCakes118

Files

38c1b2f74eb72f1ad3c3a2ed7ff4dd4c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 264KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 52KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 44KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 932KB - Virtual size: 960KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ