3e5bd810c4edf272cde508c0ff9d7a5c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e5bd810c4edf272cde508c0ff9d7a5c_JaffaCakes118
Size

2.6MB
MD5

3e5bd810c4edf272cde508c0ff9d7a5c
SHA1

467377b7078a6f8cda7b7bf565864da6a14ef6c2
SHA256

e33dc4a08c7414ccc02fbacd528610bc17ac0f5c6109775862451afbe4356bdb
SHA512

9c70e2a6f6ef3ca23fd14a8c9dc4ab0c0a59c5720f0b0fe953636215d6de663d88981a392b4b819d6362ae82de9f21ed6250e2b40939756c84f3d636dfe9b139
SSDEEP

49152:sKiC/rk62xWNol+5gOsLO66qJ6021cJjLtk4pWGNG5VGFPNqJyoTUmgu:lrZ23AbsK6Ro022JjL2WEiVqJZUI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e5bd810c4edf272cde508c0ff9d7a5c_JaffaCakes118

Files

3e5bd810c4edf272cde508c0ff9d7a5c_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

E:\PkgInstaller\base\ntsetup\SrvPack.Main\tools\sfxcab\sfxcab\objfre\i386\sfxcab.pdb

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.4MB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vsp
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE