3c6e8a80ccd33976cfdd88627d2a3988_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c6e8a80ccd33976cfdd88627d2a3988_JaffaCakes118
Size

1.1MB
MD5

3c6e8a80ccd33976cfdd88627d2a3988
SHA1

4cc3dce7dbf1aadaa897a9c3527c5031c686e168
SHA256

75378c08325020d3e4e0af5fb5ebe042a8320c3bd049c76ad5ddd62897c9c2b8
SHA512

aa26e1ec0081f8c2a7e2573704e40ff818118120f43053a6741408268ae62c997d225e5ae1092783cc4ea4dad4f5d9727655c75c3f650e1f6d27eeb5f447eea7
SSDEEP

12288:hO3pbLOro5sH/LIe3t9Y0nQNR7KQDRZYxGcqp16gxpe1Wx2E:hO3pbkMsH/1DdQNsCkyXpq8T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c6e8a80ccd33976cfdd88627d2a3988_JaffaCakes118

Files

3c6e8a80ccd33976cfdd88627d2a3988_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

SCW.pdb

Sections

.text
Size: 594KB - Virtual size: 593KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 350KB - Virtual size: 350KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjg
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE