3d39977e980b96824112dfdc3fdbaff5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d39977e980b96824112dfdc3fdbaff5_JaffaCakes118
Size

87KB
MD5

3d39977e980b96824112dfdc3fdbaff5
SHA1

a28a723329b07760971d3d4dbba25f0f6556ba4d
SHA256

92941112e4003309af62d5a121f91ecc1b17ebe054b54a3143fa6dc2abfbcaca
SHA512

32b0882f54a2502050894a2703b221e2cffec8ce85f10070a43692a923fc093b35c7bd3a762b4e7829d540beef92691b0b77ea0184590b82952f7202d325b4bf
SSDEEP

1536:2/hQp9XCWBZKTECkno09+a3Hc3OgFJyzI4RTs8qUd:EsXCHTECkno0UECOgFIzI4ps8qUd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d39977e980b96824112dfdc3fdbaff5_JaffaCakes118

Files

3d39977e980b96824112dfdc3fdbaff5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 649KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ