3a3c83f36a9d42a3ca85b794aa7f6c60_JaffaCakes118 | Triage

Sharing

General

Target

3a3c83f36a9d42a3ca85b794aa7f6c60_JaffaCakes118
Size

79KB
MD5

3a3c83f36a9d42a3ca85b794aa7f6c60
SHA1

6bbd4248402e5c73a8da02ce51d00d5819f06274
SHA256

5acc8aebedcbe9ce301e52c460b25c568d7e5a7f04ee72219a061d4ae4ae986d
SHA512

6b4b17fe62282aabee32002a47fabbcd1341e4a2db8c6802515cadac49cb77043b14eb2cf5948fc625f454f2ed8bc355a18bc7042a1b49d3cf87aef4e912f23d
SSDEEP

1536:86x7OrO8+ADmSAYEItSgV7KlGOv0/siF4duXU9+Rdokv056dAk:866rO85dJEUSQOljvWFcuXUOc5E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a3c83f36a9d42a3ca85b794aa7f6c60_JaffaCakes118

Files

3a3c83f36a9d42a3ca85b794aa7f6c60_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\depot\enforcit_maint2\test\testprograms\windows\RandomizationTest\Release2008\RandomizationTest.pdb

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ