b3ac8218cd6e1703aa6008a3387086fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3ac8218cd6e1703aa6008a3387086fd_JaffaCakes118
Size

668KB
MD5

b3ac8218cd6e1703aa6008a3387086fd
SHA1

d070df5521f1a35ab3b73acfd5031b2706578b76
SHA256

00a0e7985ccb842e955d0a2fb980ce2bfab72a628270bfde9a946bbdebb2c0ce
SHA512

88d96a720942ad7534ddcaf6338eeaff31c0257150f9abc4adcddbcc947967d30750cc1b8a5141bc6915e9dd49492f5cd635b62ee787c7a92913ddfece236904
SSDEEP

12288:wUTB1JoIIUkuC7YxmvKFEjNo8cDqF3Z4mxx/DqVTVOCc:dF7odJ3vKFnWQmX+VTzc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3ac8218cd6e1703aa6008a3387086fd_JaffaCakes118

Files

b3ac8218cd6e1703aa6008a3387086fd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 20KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 297KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 350KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE