3a3a174184277c8b19df99f47fbbca16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a3a174184277c8b19df99f47fbbca16_JaffaCakes118
Size

160KB
MD5

3a3a174184277c8b19df99f47fbbca16
SHA1

4a7b7d5dabf027fde019cdddc924f2655e5360e4
SHA256

a0857ab9c4eb62ad0a3bad1707d098b43a26540cedfb875cae4c50bdd4051226
SHA512

0f55795a8a7a96979ff0a8540c381e826dc85d7a3b3161606ab753d0b224dd9a1602098ada6be149b7adbbebd67dd0596a58fd0df3a16d14183637d9a0c5d760
SSDEEP

3072:Jff9nnIGOD1kKKifuqiyn/qKhGpX31RChRePcGurJFtOCChZN5+j2aq:t1nnQ1xKifDiyn/qlL2tnlHlCV5+j2aq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a3a174184277c8b19df99f47fbbca16_JaffaCakes118

Files

3a3a174184277c8b19df99f47fbbca16_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fqbhvyj
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE