3c4985f8acdee51ab73c984af680e795_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c4985f8acdee51ab73c984af680e795_JaffaCakes118
Size

61KB
MD5

3c4985f8acdee51ab73c984af680e795
SHA1

9267b5139eb799a8b5ae33fd3c57f87da260821c
SHA256

7f9953d042c237ff9724910c0724de2fb68a8449d8e3c72afdc38c0e9586a120
SHA512

c52c0790453f85040620f6c7e4bb48fcad112a5cca84310a7b35fd418e0bb657e0f4851e608cb9d74ca264bf7007099b79febf858edce56fb61e78ee4b8598ef
SSDEEP

1536:k8+I6QwjmCk2e3Kol4VP7uSOqd20PGxFKpf1s:ZCm3KomVPSLO20O/KpfK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c4985f8acdee51ab73c984af680e795_JaffaCakes118

Files

3c4985f8acdee51ab73c984af680e795_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ