3bcee3ff11cca90e1de42b58478aac17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bcee3ff11cca90e1de42b58478aac17_JaffaCakes118
Size

747KB
MD5

3bcee3ff11cca90e1de42b58478aac17
SHA1

54c632919974e637e32363d7b6410e43650e168f
SHA256

c26c312519087fb8f9745c883e992b0809a11c3535b3d5eafe404e12e23e844b
SHA512

bd08ad26f3a572dca37d8c5e2525f8eca91faf7f7908d16cc19ad8838873ebb7ff5b4c2067dfda4a5d878115b816d66336bb009c4b9201cba29dd933655c1c18
SSDEEP

6144:IniHo6nx2QY7slAFRWNBfrrWK0uTNRiuooqp6pfwWm+gIdJI7K0clyyvzpvTjxhx:ISo6xg5kN530xuooqMVwsgS0Tyv9H7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bcee3ff11cca90e1de42b58478aac17_JaffaCakes118

Files

3bcee3ff11cca90e1de42b58478aac17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 336KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 201KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45B - Virtual size: 45B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.hdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE