38dfceaa7efc2b38eac0d0f8cb96684a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38dfceaa7efc2b38eac0d0f8cb96684a_JaffaCakes118
Size

179KB
MD5

38dfceaa7efc2b38eac0d0f8cb96684a
SHA1

43a1f13646153d906a88ae41e910e8786dee262c
SHA256

295deb6eb8fdd8965b6fc7724898f2b356965870a412156835923098660ae33b
SHA512

baf60649e307ac06fb55ea0254d43f8c0106f5d11beb52ca27b782cc96664e11a1f645a48f7b9dbe3b01202199245477d332dbeb0ca61bb1c2dc203df8d798b0
SSDEEP

3072:dflnSeRcGsGwi8lgenom35u1rwJwwZfGVLBnKxDL6KsuGc6Qqab0pyp:dFSeGLJHJu1rmww5GVlKt6Kd6QqCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38dfceaa7efc2b38eac0d0f8cb96684a_JaffaCakes118

Files

38dfceaa7efc2b38eac0d0f8cb96684a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Documents and Settings\Boss\My Documents\Visual Studio 2005\Projects\NM3\NM3\Release\NM.pdb

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xur
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE