ea564595a4377b2355d1fcc0ec99aa0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea564595a4377b2355d1fcc0ec99aa0c_JaffaCakes118
Size

2.5MB
MD5

ea564595a4377b2355d1fcc0ec99aa0c
SHA1

562342f031367e6a9581e2d03ca437fa18685969
SHA256

2a05e6815cada13c0bdfb473491ecc7f6437175e80a86b76bac665ad415c36ac
SHA512

4e6d6ee716381a213a39c6c95c329fa22f7a1077fe6c0f86e7367afbad13bb6f337e40357aec32ddef67dc9ef56d9a9723567d348b12dacc12f846d7bc67a639
SSDEEP

49152:BhbuRKwpB/qnstLet3LyFZqhaK6zbfqdl:BH2qnstLEGx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea564595a4377b2355d1fcc0ec99aa0c_JaffaCakes118

Files

ea564595a4377b2355d1fcc0ec99aa0c_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\msosqm.pdb

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 220B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ