3c00f01a6a07778d296ef37f37db5a6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c00f01a6a07778d296ef37f37db5a6e_JaffaCakes118
Size

4KB
MD5

3c00f01a6a07778d296ef37f37db5a6e
SHA1

97546717e2e8cc43293b642e6dc2b174d96a245a
SHA256

ab23c73831d6d8dcfff60d2f916bf8602003733fdbb5d5a5e3cbdfc0e3b4a838
SHA512

c137e1aebeb4597d7fdfe4cc884409e8a53bdf704ddd4a2df38e97b4cad1c4772b4c28a8ac2239d71cc709ce88e65b6319c1019edfd166dfa3b7c94f79b44b20
SSDEEP

96:OPUOfLc+cdRjlW6dPiYtyLLlnT06m+ApLl3xAvCeyxM2F:OPXf8HtiYyJQ6m+0x36CeVW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c00f01a6a07778d296ef37f37db5a6e_JaffaCakes118

Files

3c00f01a6a07778d296ef37f37db5a6e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ