03b34e3640551747c5aa5ce1f49e1b38_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03b34e3640551747c5aa5ce1f49e1b38_JaffaCakes118
Size

954KB
MD5

03b34e3640551747c5aa5ce1f49e1b38
SHA1

bd48834cfa2a39a773467c1bf449c3be4990ef23
SHA256

987da0c5cb230ee22bc0c41efb05259ced4b179d7c0ea516f26cab1dc7c0ed0f
SHA512

97bd8f8c383b4b6d2181125f5c00d315583bd5c0d04b227eb4e144d849582bf4f7c010fd9f152cfe0b91b73774468b49d4c69f1f6692886b9ffe56b3a021ba82
SSDEEP

24576:Z2UxiCw+u/UAWVFPYnpuYjALuCQ7hpkxyvra3OMM6r:Z20iC+/JfkEhpkAeeMMk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03b34e3640551747c5aa5ce1f49e1b38_JaffaCakes118

Files

03b34e3640551747c5aa5ce1f49e1b38_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ