3e489e5351ba1d1f7bcb51618093f49d_JaffaCakes118 | Triage

Sharing

General

Target

3e489e5351ba1d1f7bcb51618093f49d_JaffaCakes118
Size

603KB
MD5

3e489e5351ba1d1f7bcb51618093f49d
SHA1

19f45996be33d0149979951f0eac735a63910482
SHA256

8fb8b53ddcc372ee9eb9219d28f6ae0495e87797105a2f73b8677cc895439279
SHA512

617e83be2dedfceafec8b8510767a05b703de5889f7e6810b307a8f7e9562060c022556fdc9dda2e5393f4cc9956ef103864ca3049a6b968abd79acc23f9bfe2
SSDEEP

12288:e3TdtLW5WIj1YSSdFx7BSXyMzBUWb9lx/9AgHLo8OW+rB:oDsj1dELBcJ9nPx/igrp+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e489e5351ba1d1f7bcb51618093f49d_JaffaCakes118

Files

3e489e5351ba1d1f7bcb51618093f49d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vc++
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vsp
Size: 1B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE