39f23c121c1ebcb34ba658bc3b1f2c74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39f23c121c1ebcb34ba658bc3b1f2c74_JaffaCakes118
Size

196KB
MD5

39f23c121c1ebcb34ba658bc3b1f2c74
SHA1

9bbc69728b4e9011c115aa37f089085a019a12bc
SHA256

0f2cfac79be066dcbe18c109196ff9189ca600eb8e23761fa630a3d6b8820c11
SHA512

0414b41b9a5d99ab1ff336db5da27d1103df6ca2dfb802eb4a11132e93341d6ba0a1aeef63d631b3ac557a041e28da8615ab6352efb38be6ed2d40dc84c37db2
SSDEEP

3072:Tgwkup0lFbs90Tcm4EzCvpKoaFf3OlCPpSRrbXdF8PeWMxzmoaKP54VdRmmZ4N3/:Gbs90Tcm4EzZoE31pHmTxi3c56d0FNv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39f23c121c1ebcb34ba658bc3b1f2c74_JaffaCakes118

Files

39f23c121c1ebcb34ba658bc3b1f2c74_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

\\EXSYMBOLS\SYMBOLS\INTERNAL\SYM6944.0\ntx\rtl\USA\exe\MAPI\mapisp\mapisp32.pdb

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjg
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE