2045ac4563b074bdc0b0e2896546c3b5_JaffaCakes118 | Triage

Sharing

General

Target

2045ac4563b074bdc0b0e2896546c3b5_JaffaCakes118
Size

271KB
MD5

2045ac4563b074bdc0b0e2896546c3b5
SHA1

7a6acb42c306f4a097b107cea2960cd4f500694a
SHA256

e99b2ea16dbffcfb23c97d045ebbffcd62cc664275c4cc9b8d8a435d2a6cdeb4
SHA512

2ac988edd2e9b751c843dafb15a5951dfd642c56c31d8595f7f6fe7ae8351345a7805f321dfc73ec21a64933668c5e38efbc6758495d79b6162a8fa46276537c
SSDEEP

6144:4YCg11qfcsi2dt1agZBb3Q70v5WdtiWXXTM6pHOUqCI2:6g11qf7dnawhgovY3ss

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2045ac4563b074bdc0b0e2896546c3b5_JaffaCakes118

Files

2045ac4563b074bdc0b0e2896546c3b5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\webapps\b\build\slave\patch-v3.0.1354.0\build\src\out\Release\update_task.exe.pdb

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE