JaffaCakes118_3c9a768564adfb06bd0a526c7929afd7 | Triage

Sharing

General

Target

JaffaCakes118_3c9a768564adfb06bd0a526c7929afd7
Size

102KB
MD5

3c9a768564adfb06bd0a526c7929afd7
SHA1

96014b019c34f5788f1a7e3752813e8afc529e61
SHA256

ca7885a72bcd93d7dd6d103300660133a2fa4509f6f2d0f00b4eccdcd548ac44
SHA512

90648b18e2f5a69bc84eebef659406cedd38c97c6a0f4f368ae2c8e520ddd67cbb2baa1218439341dcde5c358fe4e2fc8d7b6ecc18bc98d9622df4c279e9294f
SSDEEP

1536:TPwMMbbrGIUa6CWr1l5ZBOGJmwP+Xi31+/tnV+blQv56mZwd4dyzkwfztmULFy+Q:u/GMgr3INy4FnB6mo4+bfztLy+Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3c9a768564adfb06bd0a526c7929afd7

Files

JaffaCakes118_3c9a768564adfb06bd0a526c7929afd7
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE