2375faf678701177e9889f29b7c3eaae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2375faf678701177e9889f29b7c3eaae_JaffaCakes118
Size

1.4MB
MD5

2375faf678701177e9889f29b7c3eaae
SHA1

cc35e9100e82cc0d7c3f5263503db669d7b6995f
SHA256

76c0d18720765700a942052f82d7345a0cbd198e3a7110b9539b529e10ce22b1
SHA512

025802b27c201ab2c6e5bd9e2c95f7c9f0861cd7d8d05d880f25281c10f9b2a482e310ebb1915cbe8e5ea37861474bf3add2056650fdb42b1242e352ce20608c
SSDEEP

24576:Rzmle09qguJ5pq3iR1zeFWD9zs3XVHtcxm00LJmux9X7V+p0dUM+SXICM:R6le09IVqyRlkWD9zs3XdtcxpDuwp0ya

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2375faf678701177e9889f29b7c3eaae_JaffaCakes118

Files

2375faf678701177e9889f29b7c3eaae_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\wamp\www\0bd49f1eef309d60dfeb375c43b82232\Stub\Release\stub.pdb

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 550B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.mackt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ImportEx
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

iImport
Size: 512B - Virtual size: 46B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE