3f9a2a855a02c68b829230b8a8284d68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f9a2a855a02c68b829230b8a8284d68_JaffaCakes118
Size

84KB
MD5

3f9a2a855a02c68b829230b8a8284d68
SHA1

0ed0f22f0d524d3ae4c60e3d3a10e931bc1fe9d1
SHA256

1848035f65e78e1803f8feb5ff8133a22c9ace924a0d62a63774001eed6d68d1
SHA512

763bcf470b3ed90b38c9250c1ce96cc1ef98dec4497faefbc704efecbc4c34fe0496cdbbe486d27ddf0f6571ef78c4be226ad48a8fe78c228ad3ba6c670170f0
SSDEEP

1536:guHCkI9DINXpzo2IrRknW/CPIvICuxczMb70+0nC9:5pIDINXpuL/CPIQVxcok+0C9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f9a2a855a02c68b829230b8a8284d68_JaffaCakes118

Files

3f9a2a855a02c68b829230b8a8284d68_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 671KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20.3MB - Virtual size: 20.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ