3cffd041f952ec72ad2de57ad8c99ecf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cffd041f952ec72ad2de57ad8c99ecf_JaffaCakes118
Size

184KB
MD5

3cffd041f952ec72ad2de57ad8c99ecf
SHA1

e8b5b39f3e75650dab884fde2f60eb7f1610baa9
SHA256

88dbf1e700c78db3927c5bb55a26b1c1628281a671b3e97f7582816a030fc53b
SHA512

4117a6ed56f2d355884e7a7d07b430c9e92918ea67b5ade62fd0fc8956e626e9fbc00190172071bda4792ea97eae82a38fd6e1dadcab4e6f250e3fac00cf6ccd
SSDEEP

3072:0c9uTj/C0LYzd2LpNi4yZExfSDtWPUhfhR4j9P5lv8uQBdW3ecQO9B4pvXi:zAnvLWOLv0WPUzR4h51+7A92pa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cffd041f952ec72ad2de57ad8c99ecf_JaffaCakes118

Files

3cffd041f952ec72ad2de57ad8c99ecf_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mrinfo.pdb

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.zwt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE