3a403e4fee38dce56f17f21d78596156_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a403e4fee38dce56f17f21d78596156_JaffaCakes118
Size

1.9MB
MD5

3a403e4fee38dce56f17f21d78596156
SHA1

9e5c9fa5d3743036b911f3511d5bf94b78083ed9
SHA256

ffb101805cb6618e07a52cd548154ad63690cbc54b1fd9984ff96f0aed75cea1
SHA512

0389a2575b4156c05f5353817396f327cb6c94070640c4056bc516b98ff52a8ab451dca4043229142a62dde65ef75e35931c5c7e416beca0fb66ee96afb0c75a
SSDEEP

49152:WB6cmwmz2H+TYtCzAHf6CZQ6nRrceGiQnisoKT+:ZJwSFTvzY6CZQuRQew2KT+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a403e4fee38dce56f17f21d78596156_JaffaCakes118

Files

3a403e4fee38dce56f17f21d78596156_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ