2822132879a393eb36e5c3c50068caf4_JaffaCakes118 | Triage

Sharing

General

Target

2822132879a393eb36e5c3c50068caf4_JaffaCakes118
Size

201KB
MD5

2822132879a393eb36e5c3c50068caf4
SHA1

3fed3198cfc140e6f6c663ea27fc3fbfd5250a30
SHA256

b92b82b4485a10350ba6fe03bc0e860c1deffd63f21150b0d6b81c4cf71fbb68
SHA512

4ce9236c29fb751137b932af2b2dbc89ae51c16ecd5b97b7e0b2f3bb8056c414a679b57201069b5cd478b0cc07a4c43cc7c4a5df0e5a11a85f88c74ccba07647
SSDEEP

6144:hzwyiEJVorjmFGTPPZGqIzfG7qfkLiHNeUj+d:hzwREJVomFgPRGbf6qLteUj+d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2822132879a393eb36e5c3c50068caf4_JaffaCakes118

Files

2822132879a393eb36e5c3c50068caf4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

verclsid.pdb

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nkh
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE