3eab02f1311d1953bbd4e1379ee9f38e_JaffaCakes118 | Triage

Sharing

General

Target

3eab02f1311d1953bbd4e1379ee9f38e_JaffaCakes118
Size

737KB
MD5

3eab02f1311d1953bbd4e1379ee9f38e
SHA1

be63efa9999e31ea58143155784348251866f380
SHA256

d22b1ce1745db7f6d42b2b783151f858c5efb475737a788de42d38fadb34df94
SHA512

683fa478d1b4c4650f5298dd9558a4df462094ffeb20cc176a792b93aa68ed32aec3435ea379d59b23dbe9f5b7f1304fa73a5f73db950ba913ac1cf3cebf29a1
SSDEEP

12288:PFF8SeeF7kSKiZyMP/dkWmL014VTlhGmYeGCpIwhoejGf1nlhgXSJenCbU7epReE:PFEmQSKiDHdpI014VT3GpeVpIwhBjGtd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eab02f1311d1953bbd4e1379ee9f38e_JaffaCakes118

Files

3eab02f1311d1953bbd4e1379ee9f38e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ