3efa05a08347b7905538dc1b75bc6290_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3efa05a08347b7905538dc1b75bc6290_JaffaCakes118
Size

22KB
MD5

3efa05a08347b7905538dc1b75bc6290
SHA1

a84a84a9a893b8ba5c04fecdcb570a9af7c9d8ed
SHA256

465dd8f2f5180764d135da7e5d8a1a7b8a681ff8958f92b7a4a981fc07060b88
SHA512

971e093097b899fbc4a813359c167beb556b3ce47d84d31ef4d173889359093e3ed4b3a2e9c7d01d0d05bc83fe4db4f3664e1ec7649650956924b9eed5dbb8fa
SSDEEP

384:YdbV7ZwAbT24y7tEPhL1UAsNgH5tT1mAFZ2qFPf5Eo7S2VxMe:kbV7LG4y+pL13IMtZmAO4PRE1kxV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3efa05a08347b7905538dc1b75bc6290_JaffaCakes118

Files

3efa05a08347b7905538dc1b75bc6290_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 658KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ