38fe9cb8c1f2d77d39b1f26d46661257_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38fe9cb8c1f2d77d39b1f26d46661257_JaffaCakes118
Size

70KB
MD5

38fe9cb8c1f2d77d39b1f26d46661257
SHA1

0bc103d536c516912af85898f8fcd50888a4f50b
SHA256

6e6ad3849163af51bd69c2fa85b2b946518c67b5d413d68d443c5648b03b6b11
SHA512

9c3408ca37315978f2352b8627d45baf4a7a03940c7c12418d5cac47087c8330c20421b9d3f7e524bdde427d90f6f481849ca575d634aefe94014dad3b04382f
SSDEEP

1536:9egau0ZQFeCsiw2aypiz0WaHfaTB/ZTSANQDTe:Yq7D9piwdCB4ANUe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38fe9cb8c1f2d77d39b1f26d46661257_JaffaCakes118

Files

38fe9cb8c1f2d77d39b1f26d46661257_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 497KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4095.6MB - Virtual size: 4095.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE