e7889494345f5fc7c5e4c2d15002e65b_JaffaCakes118 | Triage

Sharing

General

Target

e7889494345f5fc7c5e4c2d15002e65b_JaffaCakes118
Size

122KB
MD5

e7889494345f5fc7c5e4c2d15002e65b
SHA1

8f552a7fa5bbb08f7833c46606cad7fe2773d0a7
SHA256

ca389d306f37c567e6e0573528da8d23dfd92abb968101c505a74c330f33aec4
SHA512

d0fc1a9cc2a60b22680809ca04ecce4b14e4171267f2d09242ee4b8263a2560c28c0ebbc94afc860edd3a7aec7b08aaf8f4defa3b214e51421cb3dd2ed9f1619
SSDEEP

3072:7w5X38L/uh82c0a53wySzkWOxKV6GLZv6Z7zBI:7w5Xszuh893wxrxV5LZCjI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7889494345f5fc7c5e4c2d15002e65b_JaffaCakes118

Files

e7889494345f5fc7c5e4c2d15002e65b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ