3c0fee5be528ba9c8e41dfdcaf40bd72_JaffaCakes118 | Triage

Sharing

General

Target

3c0fee5be528ba9c8e41dfdcaf40bd72_JaffaCakes118
Size

195KB
MD5

3c0fee5be528ba9c8e41dfdcaf40bd72
SHA1

2853919ba6d6ba12d470f03065a277d13cf9d604
SHA256

5a9dc5af517ea9dbf3049545ff50b1f8cdcecd133abcc4fec45f1f7bc1bd84e5
SHA512

0810f7f98262a6cfd699e9054937e1c08298577a715bafc4ec23b2115ae1d46870047fc62d256c5ad644c709a01694de6f3a19e929fb87c597fc87efe96f60a7
SSDEEP

3072:hp227XQonpl4It7vgqI0mHC/VrES9Mf5oAE3PQjAthyuPeyQFZ:r57XQonpD74O9l6bE3PQj6XGl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c0fee5be528ba9c8e41dfdcaf40bd72_JaffaCakes118

Files

3c0fee5be528ba9c8e41dfdcaf40bd72_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

fltMC.pdb

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rol
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE