2427d5f0342a10fa680fd08b2048769d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2427d5f0342a10fa680fd08b2048769d_JaffaCakes118
Size

1.7MB
MD5

2427d5f0342a10fa680fd08b2048769d
SHA1

d632281d1ec2effe7c95e2aafc6a294d1603938e
SHA256

3ce5aa031a45a1599b300cdac795082e37d7ce565c61fc7d6fe1d56537cbe36f
SHA512

e6c37ca9c246258d8d846495a3358ba0519e53cf932db2ec4af2a1c36b8fe057668c2146ac1600c4f05392c46dd78dd0244582c26296448e8a7d84935843163e
SSDEEP

24576:Se8VNM+9oAwf1flT/7e8VNM+9oAwf1flT/ou5vPOTN1nlf8StzW:Se8k+UnTze8k+UnTQu5HOTJxzW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2427d5f0342a10fa680fd08b2048769d_JaffaCakes118

Files

2427d5f0342a10fa680fd08b2048769d_JaffaCakes118
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

bckgzm.pdb

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ