2907d30a3b7e927d5a4e7611885fe6a9_JaffaCakes118 | Triage

Sharing

General

Target

2907d30a3b7e927d5a4e7611885fe6a9_JaffaCakes118
Size

1.7MB
MD5

2907d30a3b7e927d5a4e7611885fe6a9
SHA1

17f104102b4a969a6f63d93a3475e62853a8052b
SHA256

324f1b0aeb45d91a4b4e9a72e3bb212e1b751726cfe40a4b21c4c8e0ee035b22
SHA512

62766956d6fa76b79ba878043d5c191c2f32ca46c2b83afede1f69d11aff1bff31f1d4ceb4660864f153ec1b23ec0aed2efe3c06d8ce7b001b3d60099e66b8c5
SSDEEP

49152:OQovTjYA6GXI7Q3ndHgNOB+fM1qY3rxFm:1pARSOBR46xF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2907d30a3b7e927d5a4e7611885fe6a9_JaffaCakes118

Files

2907d30a3b7e927d5a4e7611885fe6a9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 779KB - Virtual size: 779KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 879KB - Virtual size: 878KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ