02494e0f1f5ef66c99b92d0cf29a9db8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02494e0f1f5ef66c99b92d0cf29a9db8_JaffaCakes118
Size

437KB
MD5

02494e0f1f5ef66c99b92d0cf29a9db8
SHA1

3cd637e404090aed498139aaa47b2d15073067c5
SHA256

058724135b74c0e9253180765d7f6ed655735ff2a915f51d33ff612fc856fb0f
SHA512

f739e6b3bf228e914a0f74db4fe19311a00b8fa82a4f1b2bbfcb8fe667d8854c4ed4d03409bda902825bf940ed048f5c425207f90eb9e37d758a9b6daeefc012
SSDEEP

12288:BziYspLd4lUvqwTsnqqMIP1VmZJgm2+RiFrvkXbBG:cYYGlbwTAqqMCmDgr+SSI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02494e0f1f5ef66c99b92d0cf29a9db8_JaffaCakes118

Files

02494e0f1f5ef66c99b92d0cf29a9db8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\bugreport.pdb

Exports

Exports

??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z

Sections

.text
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.mjg
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE