3ab8fe01507ae8e64b1fc879c7a7f88a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ab8fe01507ae8e64b1fc879c7a7f88a_JaffaCakes118
Size

323KB
MD5

3ab8fe01507ae8e64b1fc879c7a7f88a
SHA1

6922600c32d05645bdce02817e1a7197557419c3
SHA256

18c513b22daa5fb9112378a718f6d83fcda92f4eb4ec77ee9966efbaee616adf
SHA512

474f661fe2d700919a4fa54d61c04887baa958ddff3ca5133f37eedb701f3114f4779ba5e61e72ce05aae1d2ad8d44e1f00a4aa683685ed3eb1954f01e9734e6
SSDEEP

6144:IaNuRgyVTCJScUTN+ZpKistldevCbq9ezXUSIxu4luAhB9Vi:IcuRlVTCANWHuZbqUQSKu4luAf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ab8fe01507ae8e64b1fc879c7a7f88a_JaffaCakes118

Files

3ab8fe01507ae8e64b1fc879c7a7f88a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 271KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SnD
Size: 30KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE