3c721cc8affe4f1e0c528c9855a14999_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c721cc8affe4f1e0c528c9855a14999_JaffaCakes118
Size

1.1MB
MD5

3c721cc8affe4f1e0c528c9855a14999
SHA1

6a6e314d58245a8f332625162fb323d33291d000
SHA256

5087204dda4186faa967d9523dfb0afa65da80cb0a2cf221210ddaf49b4d210b
SHA512

f4bbee58dacd8500ce95d2915a5cde5d96ddf7f97a618eeb9140518d5e655c368387798276db6847d26c1188ba552485ce3aadeb96c8bbf1ccdb6d798d8f8cff
SSDEEP

24576:X20I7bUa646XOp9QJe8F3+PPi8sRhWbg/luMCyHT4rNy539MKqxb+cvJTIMbhW:X2n27Jnp+nbgdKyHT4g5NxcvljQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c721cc8affe4f1e0c528c9855a14999_JaffaCakes118

Files

3c721cc8affe4f1e0c528c9855a14999_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ