3e0c0e912038383f02862bd91efac843_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e0c0e912038383f02862bd91efac843_JaffaCakes118
Size

4.3MB
MD5

3e0c0e912038383f02862bd91efac843
SHA1

a3521023969a8bf77ffa6962b96f38cdcbddcb48
SHA256

18c8d4a83a6c761e084c8d73fea9895ecf8263005705a9ee5cb68a50f1313658
SHA512

bad68a17c4a31c73ea3d11cbd8e6dfe0d9fe6b76552d2a16fa23ce8257e6ba6088f6d56eb3b7375529261cd63b58a6e8953609bdd9caa56cdd01b5c15f7f5727
SSDEEP

98304:Qd7Z1VW+Ionb/bMMDK/N9EsLYj62spMRcIBUTknlRgJ:c7Z1o+ZNDSN9PcKFTkLgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e0c0e912038383f02862bd91efac843_JaffaCakes118

Files

3e0c0e912038383f02862bd91efac843_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ