3eacf3b4d4527a2a212287589f133808_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3eacf3b4d4527a2a212287589f133808_JaffaCakes118
Size

2.6MB
MD5

3eacf3b4d4527a2a212287589f133808
SHA1

a68b42bfd921a820c7080fd604471a9dcaf606ec
SHA256

ff4789c151c2851cd6761a87efb6a5cb57e6fa79f72e7f354cb4ec8441ec3249
SHA512

31e9409e7503ecf4f87cb7a74ff486e0aadf515e396872d88d88c6626b8000c2fa22b2138bbdf9a4f590c704ca89f45bd5cc4a68548b247fe67f9bc8ee106182
SSDEEP

24576:EO4///3no3yQZYzM/ASu+uGCYH7qsWmAOSr4XTcEj:tsn3noCGAyuGL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eacf3b4d4527a2a212287589f133808_JaffaCakes118

Files

3eacf3b4d4527a2a212287589f133808_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 120KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE