3f4f46bbc1b46ca5bfe060d7ca822c85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f4f46bbc1b46ca5bfe060d7ca822c85_JaffaCakes118
Size

245KB
MD5

3f4f46bbc1b46ca5bfe060d7ca822c85
SHA1

7e2ed6cb2a49af6c435e167681930f6759ac43a5
SHA256

545a032353af94c255e3f06d47832d04317978538d5bcec3d8339a84e8e9aba0
SHA512

96392a82c5166af76d1e60abd5cb1338b8b3a533610cabc030faa42815a2ebdd58f3e485cf06524a7e8f79c983efd0b016e93e74a32b733b11b2197239980c3f
SSDEEP

6144:XAdaLygjyv3nPNVMRH3fFechGl29Wo8B3gA+OONy+p7aeK95rSyW3:VLyh36XYcG29zcgA+xTloPQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f4f46bbc1b46ca5bfe060d7ca822c85_JaffaCakes118

Files

3f4f46bbc1b46ca5bfe060d7ca822c85_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\BriqsBuildDirectories\BriqsSourceDirectory\target\briqs20\retail\i386\netfxupdate.pdb

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE