3b8bdc98c5f68f2515f46cb4e4e4ac0f_JaffaCakes118 | Triage

Sharing

General

Target

3b8bdc98c5f68f2515f46cb4e4e4ac0f_JaffaCakes118
Size

175KB
MD5

3b8bdc98c5f68f2515f46cb4e4e4ac0f
SHA1

90e044b533d3a16c5b28a40bba56d293745c7077
SHA256

60ddb0c3201897bcd98e9cf3aa8eca8851274ab77caec001c974d8864288e1be
SHA512

82ae6155c12fa7614e80dbe9d76530c2556e3f0313714b58100bcebf226759c301a8e90e19fb305b52fec412b64e3d31c184483d4ce8ead024eb36cbce68fae2
SSDEEP

3072:RNe+MgmemAXQohR2x/LIP1yqylAU64FOHHf8FhBlVQ6:RYKQohREWyHlAU648nf8FZ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b8bdc98c5f68f2515f46cb4e4e4ac0f_JaffaCakes118

Files

3b8bdc98c5f68f2515f46cb4e4e4ac0f_JaffaCakes118
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\Src\Client\Load64\x64\Release\Load64.pdb

Sections

.text
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ