b3865cfd1e1d4c9ea4435033240a9ba5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3865cfd1e1d4c9ea4435033240a9ba5_JaffaCakes118
Size

564KB
MD5

b3865cfd1e1d4c9ea4435033240a9ba5
SHA1

b64d8e2f05ceaf8c03b720f3892cf83e2514d2db
SHA256

a49702da01e65829cbafa3094c475686b3a0d051ff36972cce2c08dd74fdac27
SHA512

73f088261481bf1cfa56abdba1d59b4dfb08f99f217c13fe1b41e005023a1b58747210bf4f50f01b0e99b515c34e6efdd6a45071a1b3cd885c97337e4ca1149e
SSDEEP

6144:yx1ikcirOHWx68InKNYIopWU8uGdJgb1tOqiR2K2unwN2GNJNS:ySy6Hr8InApopMuGdJWOqfK2un5GHN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3865cfd1e1d4c9ea4435033240a9ba5_JaffaCakes118

Files

b3865cfd1e1d4c9ea4435033240a9ba5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ