2e9d78ab9a2e662a20e41e567fcbc5f3_JaffaCakes118 | Triage

Sharing

General

Target

2e9d78ab9a2e662a20e41e567fcbc5f3_JaffaCakes118
Size

714KB
MD5

2e9d78ab9a2e662a20e41e567fcbc5f3
SHA1

fc5625ef7684019270ea0417ecd8faea1222c0f3
SHA256

5e6ef055d7f7c00ec94075b5d0afd67eeb9075275d5cb868bb1a042fe876db24
SHA512

d231448c721fd7e29e7cbce36f4dbaa4eb94685546ffe0db829241f06f3c399ba8a1bf09751576412470a76fbecb3bd0ea8bf5fab9c34f6c7237fa680434af54
SSDEEP

12288:ThE0Jxp+oc2RxtsjoaMrUsRre0/cDVLq3mHk249x/IrF3j9n:Thj1cjoFwJ0JmHkDRSz9n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2e9d78ab9a2e662a20e41e567fcbc5f3_JaffaCakes118

Files

2e9d78ab9a2e662a20e41e567fcbc5f3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 285KB - Virtual size: 285KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 307KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ