3cd445373083f0e205709aaec8618d3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cd445373083f0e205709aaec8618d3d_JaffaCakes118
Size

2.7MB
MD5

3cd445373083f0e205709aaec8618d3d
SHA1

3cca6003709ddca32e73dc5589af52f3451b6545
SHA256

d1da9b8fa877e6c79e9f4f30810a9f1785f65f257059782266656f2965a0e5d1
SHA512

3d7fff112b9a39106c91ea014338aacf586b5e471e81e80479fbcaf6dd3ff4928f40032ae67e90e299685e950ad0dea526e67274497b490fc8d73bab7702894e
SSDEEP

49152:V+VivU36vUt+JTclf/gJAPXg+D8Jb2P3T36zS3ZBUdkoHeT:8MU4Ut84oJmXv6Yj6W3ZB0HeT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cd445373083f0e205709aaec8618d3d_JaffaCakes118

Files

3cd445373083f0e205709aaec8618d3d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@.pdb

Imports

mscoree

_CorExeMain

Sections

.
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.
Size: 464KB - Virtual size: 461KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ