e8ce9d0a3d0bc65953e598e4c0e4f4d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8ce9d0a3d0bc65953e598e4c0e4f4d0_JaffaCakes118
Size

1.9MB
MD5

e8ce9d0a3d0bc65953e598e4c0e4f4d0
SHA1

656437194a04a54087d254b914814f86789a5050
SHA256

3b93360aaa905ff28a33cbc726b865331c11e8ad670fc7a5309f73ae1d13f68b
SHA512

8c8c7dc40f36611c1f5aa8ca6fb420d03b1338a09b96f63710932bc75bd7c2533935092c57c679438203223bccae766d195461e0ba818997514e387e61fab91b
SSDEEP

49152:dYiTKpYiTWYiTmYiTmYiTmYiTrYiTrYiTXHF+3j5D78OBU6:mBCs16

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8ce9d0a3d0bc65953e598e4c0e4f4d0_JaffaCakes118

Files

e8ce9d0a3d0bc65953e598e4c0e4f4d0_JaffaCakes118
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 566KB - Virtual size: 566KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ