3e766e83d36037bfeb66fb0fb4b21c42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e766e83d36037bfeb66fb0fb4b21c42_JaffaCakes118
Size

112KB
MD5

3e766e83d36037bfeb66fb0fb4b21c42
SHA1

263f9f3fba78d6a37db12e4d34618fedb2cbe885
SHA256

2f2e901040961aa06697e333aaa88dd940b84a6acb3f45b69fd6ee9399ea71c1
SHA512

f491ef1fc22341f183c96763b50dc912586ae7ee23337590ae635fd566572fa82b2f0ba025430fa80ee0abbfad1b98ec8bbd539f6d53845b63af7f90bfbae537
SSDEEP

1536:Jl22cAwsslaCKYbW00B25s5bigCBzeJf/PuSCEH4NdVgbv1OZwY7bWa3xVg:jexpmMW07s8FzeJWlEH47odVY7bWa3U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e766e83d36037bfeb66fb0fb4b21c42_JaffaCakes118

Files

3e766e83d36037bfeb66fb0fb4b21c42_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 51KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ