7ee4919c68a4aa4bdb8e1c9f06b1b5a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ee4919c68a4aa4bdb8e1c9f06b1b5a7_JaffaCakes118
Size

1.7MB
MD5

7ee4919c68a4aa4bdb8e1c9f06b1b5a7
SHA1

95f355e696fab99fd52a4d677cdc0d8b6c856f4f
SHA256

d287392abb34ea8cf4501af575da2481a75431459d38b0fee86f4370f53d8d12
SHA512

ea24bd895c7563c116792e69d5ba132c3fd7e5c26fc037dbf558d5ed053522e0c40da458e46feaf12663dcae7e42ddfd6d4de09699fc4a93c2bcf38fa6fc09c5
SSDEEP

49152:X6KOelzvlI7uK2UwY0/KcnTUXN8hGuYeVAfF2C26XkYRW4abu7/TKVirsdpH:X6KOMvlIKKcYLAw26Xl8ujTK8rsdpH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ee4919c68a4aa4bdb8e1c9f06b1b5a7_JaffaCakes118

Files

7ee4919c68a4aa4bdb8e1c9f06b1b5a7_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Offer\gentle\between\Log\Ran\hear\Aboutlow.pdb

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ