3673dd59cf53dcddd9cbcbeb21e1e258_JaffaCakes118 | Triage

Sharing

General

Target

3673dd59cf53dcddd9cbcbeb21e1e258_JaffaCakes118
Size

578KB
MD5

3673dd59cf53dcddd9cbcbeb21e1e258
SHA1

7f841004e329a1c12d6cc3167dcd93821b41eb66
SHA256

c6cdd2449749df80e3ae12272b80825203eb4239daf8217aea9e783157105f97
SHA512

79c54aa361571bd3dd87d4dd24a0f4d32b16e367c97412c86cd0382677c814fc11816057c56ff77120ffad7bced566dbcf8763fb2d042b63a549afe9e0a6585e
SSDEEP

12288:WKWNUtruBdwW3qcXZ4cLJ2Pzi35amtsob16ELzO1QevDkOu1:WVNRj7LJyzi0mSMBwQevD7u1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3673dd59cf53dcddd9cbcbeb21e1e258_JaffaCakes118

Files

3673dd59cf53dcddd9cbcbeb21e1e258_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.rdata
Size: 482KB - Virtual size: 858KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ