3f37f80cd70126e3205baed9bc415ff9_JaffaCakes118 | Triage

Sharing

General

Target

3f37f80cd70126e3205baed9bc415ff9_JaffaCakes118
Size

5.8MB
MD5

3f37f80cd70126e3205baed9bc415ff9
SHA1

748fb06c2e4b80deca87db2017513da0f3eab5da
SHA256

bcfabdddb49bc9635266ff36ea47b4d3966854df89717955d2ba30f7b6341c8f
SHA512

29c8853d0bae2fb4d471ed30eecf3f54ec59ab0fe26dc6fef9fba602b2cdea64e93702fcb3b8c1d9fbac751e939bd1dd64a06bb3734876302fc1d620f6ea5404
SSDEEP

98304:GfssEeVuJahp9recW4XWi9V8hWDKvJjprgz+VRIjFTkG4BlZmeq2p0Yy8CU:G31T7ecbXWi/DKZV654H/Pa8T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f37f80cd70126e3205baed9bc415ff9_JaffaCakes118

Files

3f37f80cd70126e3205baed9bc415ff9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ