f5782925ec09cf042e68650ce78c663a_JaffaCakes118 | Triage

Sharing

General

Target

f5782925ec09cf042e68650ce78c663a_JaffaCakes118
Size

2.1MB
MD5

f5782925ec09cf042e68650ce78c663a
SHA1

8a07d91cdab071d2016eb90055ed977d2e0f68b6
SHA256

b43cfeaf1ca4621068fe0e6fc1202e1651b72350e88a66821029408eea1f9dac
SHA512

36c3c48d1073db186dd58591458fea31beaa5027cbdc9943fbdd7f26132aba9094f506f0e5d11d89b0f20fed56e54ba821ec6bc7537f4177fd4879d2a2c3aa1d
SSDEEP

24576:MLSpfGSzFQcsNBM/9/fwK/FTwfCBM0VZeg1ISYaewsAju:FpLTsNBk9/fw2BwfmM0f9lju

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5782925ec09cf042e68650ce78c663a_JaffaCakes118

Files

f5782925ec09cf042e68650ce78c663a_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\onenotem.pdb

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 360B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ