2694e7e866aad8ba9f05c3dcb1d065c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2694e7e866aad8ba9f05c3dcb1d065c7_JaffaCakes118
Size

144KB
MD5

2694e7e866aad8ba9f05c3dcb1d065c7
SHA1

57966761bbcd502b5a4df418bb5f22b270234967
SHA256

ab5de2c3ac775c5905c18672f8ce77bf755fee0333075c2a2f7ef93048678a96
SHA512

9f1c1c7296d729260822d78dff9ffa42cf39937f227ba0e16c2fae21984cc30447302252fcdd4a634e1caf762a3e5767d4889060812cde20123b6f4eb6eebdb1
SSDEEP

3072:0uzRaNuZ3uI8LogiLH/P3uw2QRo/B2bkVUdxLhOCU+ugyaOu67FJeUaVZ:0+smuHELffu9q/kefNOXXrb7FJ8T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2694e7e866aad8ba9f05c3dcb1d065c7_JaffaCakes118

Files

2694e7e866aad8ba9f05c3dcb1d065c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

??0ZlibEngine@@QAE@ABV0@@Z
??0ZlibEngine@@QAE@XZ
??4ZlibEngine@@QAEAAV0@ABV0@@Z
??_7ZlibEngine@@6B@
?compress@ZlibEngine@@QAEHPBD0H@Z
?decompress@ZlibEngine@@QAEHPBD0@Z
?flush_output@ZlibEngine@@IAEHXZ
?load_input@ZlibEngine@@IAEHXZ
?percent@ZlibEngine@@IAEHXZ
?progress@ZlibEngine@@MAEXH@Z
?set_abort_flag@ZlibEngine@@QAEXH@Z
?status@ZlibEngine@@MAEXPAD@Z

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ