3fc390795cf9ac677a2e1ac48ea192a0_JaffaCakes118 | Triage

Sharing

General

Target

3fc390795cf9ac677a2e1ac48ea192a0_JaffaCakes118
Size

532KB
MD5

3fc390795cf9ac677a2e1ac48ea192a0
SHA1

104d1d427ca486aead323fa23f4cb33bb7d747fa
SHA256

8a6a64fdfdee16562eb933d5e45f2f0e7e7048fae1e76ab321e1c36b6130890b
SHA512

f09293115a9d5570e8402b57845a3b0864fa3804b2ebf400d69f7fb664fe3514e5952c0d2ee8c0e55d754298ffadf67912ecd4b3d71bd4877a632885e2e08904
SSDEEP

12288:76DNoVyxH8R2qkBM9rPwFRiMoa2U2y5vTSssrILIs7kQ/:uDNoVDUqkBM9EFRfoBPyV8rxs7kQ/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fc390795cf9ac677a2e1ac48ea192a0_JaffaCakes118

Files

3fc390795cf9ac677a2e1ac48ea192a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

c:\bld_area\InstallToolBox_r5.7\bin\bin.iru\MiniStub.pdb

Sections

.text
Size: 431KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ