e2bb7ba3baa3f93129e5aceb8dd2269d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2bb7ba3baa3f93129e5aceb8dd2269d_JaffaCakes118
Size

118KB
MD5

e2bb7ba3baa3f93129e5aceb8dd2269d
SHA1

ae13267446ea11c9be34951c3c249772bf8117eb
SHA256

785f84f3e3362ae5c84fe662fbee7fa8bc2e5281bfda0cf4eb7ba2e59a815896
SHA512

299de288233f8e358af57ecfe212f5e9bebaf1537bf12e09dd226a4681ab1fea1feb50ff1acf612efc1b0394eb07f57bd7dcbd20ca8b068c3b9d53234b08ea2a
SSDEEP

3072:1+MiH57YPi3XstkiOrQYUs62q7a2h30W8anG:30YPi3cfOrQYj62T2aYG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2bb7ba3baa3f93129e5aceb8dd2269d_JaffaCakes118

Files

e2bb7ba3baa3f93129e5aceb8dd2269d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 553KB - Virtual size: 553KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 627KB - Virtual size: 627KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ