3f66de82a3d7a773a617c11398c028d8_JaffaCakes118 | Triage

Sharing

General

Target

3f66de82a3d7a773a617c11398c028d8_JaffaCakes118
Size

177KB
MD5

3f66de82a3d7a773a617c11398c028d8
SHA1

7ec6c2d7ba86f81234218aed1f993015f5ca19f1
SHA256

c1ea6a904ce333ddbf7c66cb476c62cdf292307b9d68a0774c50fad6a8d27acc
SHA512

7c57a494718e86040119ca68ce25570382e89cb45cb0b0d2f9d22d8677353ac6e392275eb8a502cb7991f1ea316fce9be6aee8690a0ba820a0adf961f9f5a215
SSDEEP

3072:bDwgoaavISE4m+11+sXvl5TM2n5RyvO6k0w4IEIzJATpSbOsIePphvK7u:48EI7z+f+y/Znd7043JATpSysbphvWu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f66de82a3d7a773a617c11398c028d8_JaffaCakes118

Files

3f66de82a3d7a773a617c11398c028d8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE