3d53768015c2f42e3c405c89571174a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d53768015c2f42e3c405c89571174a8_JaffaCakes118
Size

731KB
MD5

3d53768015c2f42e3c405c89571174a8
SHA1

c672b43a6efbaa3edce79731b82982cee025c64b
SHA256

8b72d726e7a5d658a6086a8947b910826d8c16cb9e8d87591da0ead2a2955b7c
SHA512

bb00c38a6a26a424487075ae98742051425b4e741f7225ae0a523be64a17d7231f7d961f9c0eb945a5ec215ed378a8329f22921b70f21599ffbecf9865911996
SSDEEP

12288:lj63Aoro7YKBjaKX7bUE90ucKK95W6iptjQMDbBja1z5Q:lj63lrokUOU9hcvNipt065aZ5Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d53768015c2f42e3c405c89571174a8_JaffaCakes118

Files

3d53768015c2f42e3c405c89571174a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CYC0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CYC1
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.!rc!
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 703KB - Virtual size: 703KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ