7eff35fc0c3cb84c978cfb12c8df8e40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7eff35fc0c3cb84c978cfb12c8df8e40_JaffaCakes118
Size

2.3MB
MD5

7eff35fc0c3cb84c978cfb12c8df8e40
SHA1

a13f27c3bedc9a7540012ea99f7510acc28c704e
SHA256

078dc9568482ca93ec3b611fc1ed0eba9e9369dc2a9bd5c59809d5bac5fc46a8
SHA512

c8c28a54e7f0ce3b9a3ee69701f63e00d739e4a02a638c0580b87291c7398efc8fafd5249c33ceb65f4a138e003aec07f9780b10814a3efd681692b0f18b25f6
SSDEEP

49152:LTej3ITn121SHIMwaYXOSx43W2mMeRx04DqX93AyDWOgrC5iWAwjZ:Li6n121SH0aYXq3W2mMew4DqXpAyDWO/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7eff35fc0c3cb84c978cfb12c8df8e40_JaffaCakes118

Files

7eff35fc0c3cb84c978cfb12c8df8e40_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 409KB - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ