2688f17c9bcd65f28e31fde091afff58_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2688f17c9bcd65f28e31fde091afff58_JaffaCakes118
Size

320KB
MD5

2688f17c9bcd65f28e31fde091afff58
SHA1

d2fa9ed5a4893b565dc1657784332562a3526169
SHA256

05d8f3df5b9514e7b869f2eec1f9bc51ec91bf94e88575ae5d95c2d9b7ab3d67
SHA512

5a92c3e41137b426aac485cd7b8945587bddbc9f4f2f5ab47525ceab0389f1f63010295dec4e9d6f95f0ac2b36460890b116a7b7a447447abe8605676db8303c
SSDEEP

6144:Ug37NIIB2M9yTAYniC4/+feU4SSR+JO05i7P9iFY:TZ/B2Sy0Bx/+fWlRCY7P97

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2688f17c9bcd65f28e31fde091afff58_JaffaCakes118

Files

2688f17c9bcd65f28e31fde091afff58_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\clientci\workspace\ime_compile_2.14\ime\navi\output\IMESkinInput.pdb

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.lif
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE